Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 08:58:45.111 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55996 12 10365 1 2025-08-03 08:58:53.457 00:00:10.440 TCP 23.104.0.1:44680 -> 1.101.0.1:3000 15 1926 1 2025-08-03 08:59:45.353 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52502 10 6452 1 2025-08-03 08:59:53.934 00:00:10.370 TCP 23.104.0.1:54938 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:00:45.569 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54332 10 6452 1 2025-08-03 09:00:54.347 00:00:10.363 TCP 23.104.0.1:34192 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:01:45.791 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:37508 10 6452 1 2025-08-03 09:01:54.748 00:00:10.367 TCP 23.104.0.1:35664 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:02:36.962 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 09:02:36.747 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 09:02:46.075 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56900 10 6452 1 2025-08-03 08:58:05.647 00:06:00.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 09:02:55.151 00:00:10.369 TCP 23.104.0.1:37500 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:58:05.645 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 09:03:46.299 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42508 10 6452 1 2025-08-03 09:03:55.558 00:00:10.368 TCP 23.104.0.1:47946 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:04:46.528 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50152 10 6452 1 2025-08-03 09:04:55.965 00:00:10.367 TCP 23.104.0.1:49212 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:05:46.743 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37342 10 6452 1 2025-08-03 09:05:56.372 00:00:10.320 TCP 23.104.0.1:54976 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:06:46.963 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:44038 10 6452 1 2025-08-03 09:06:56.735 00:00:10.329 TCP 23.104.0.1:59030 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:07:37.004 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 09:07:37.174 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 09:07:47.147 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55282 10 6452 1 2025-08-03 09:07:57.109 00:00:10.369 TCP 23.104.0.1:50434 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:08:47.362 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33900 10 6452 1 2025-08-03 09:08:57.515 00:00:10.363 TCP 23.104.0.1:36550 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:09:47.576 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47202 10 6452 1 2025-08-03 09:05:05.648 00:06:00.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 09:05:05.646 00:06:00.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 09:09:57.917 00:00:10.382 TCP 23.104.0.1:40196 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:10:47.784 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57880 10 6452 1 2025-08-03 09:10:58.336 00:00:10.372 TCP 23.104.0.1:50224 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:11:48.009 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43382 10 6452 1 2025-08-03 09:11:58.747 00:00:10.361 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:12:37.046 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 09:12:37.128 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 09:12:48.183 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60884 10 6452 1 2025-08-03 09:12:59.148 00:00:10.377 TCP 23.104.0.1:41954 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:13:48.396 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50564 10 6452 1 2025-08-03 09:13:59.569 00:00:10.329 TCP 23.104.0.1:48636 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:14:48.566 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50596 10 6452 1 2025-08-03 09:14:59.947 00:00:10.371 TCP 23.104.0.1:51798 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:15:48.789 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33678 10 6452 1 2025-08-03 09:16:00.353 00:00:10.320 TCP 23.104.0.1:35468 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:16:49.004 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46574 10 6452 1 2025-08-03 09:12:05.647 00:06:00.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 09:12:05.650 00:06:00.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 09:17:00.724 00:00:10.371 TCP 23.104.0.1:54518 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:17:37.148 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 09:17:37.523 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 09:17:49.220 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57782 10 6452 1 2025-08-03 09:18:01.139 00:00:10.331 TCP 23.104.0.1:48706 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:18:49.433 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40070 10 6452 1 2025-08-03 09:19:01.513 00:00:10.368 TCP 23.104.0.1:59208 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:19:49.598 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54268 10 6452 1 2025-08-03 09:20:01.917 00:00:10.387 TCP 23.104.0.1:50866 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:20:49.808 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47348 10 6452 1 2025-08-03 09:21:02.339 00:00:10.373 TCP 23.104.0.1:33392 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:21:50.034 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45194 10 6452 1 2025-08-03 09:22:02.752 00:00:10.400 TCP 23.104.0.1:43932 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:22:37.401 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 09:22:37.455 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 09:22:50.253 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48904 10 6452 1 2025-08-03 09:23:03.184 00:00:10.361 TCP 23.104.0.1:46864 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:23:50.466 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:50624 11 6504 1 2025-08-03 09:19:05.650 00:06:00.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 09:19:05.648 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 09:24:03.584 00:00:10.363 TCP 23.104.0.1:53012 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:24:50.728 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40264 10 6452 1 2025-08-03 09:25:03.985 00:00:10.327 TCP 23.104.0.1:43340 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:25:50.937 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:33736 10 6452 1 2025-08-03 09:26:04.354 00:00:10.325 TCP 23.104.0.1:35106 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:26:51.177 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40418 10 6452 1 2025-08-03 09:27:04.721 00:00:10.374 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:27:38.766 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 09:27:38.635 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 09:27:51.388 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58822 10 6452 1 2025-08-03 09:28:05.132 00:00:10.362 TCP 23.104.0.1:44870 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:28:51.613 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41822 10 6452 1 2025-08-03 09:29:05.531 00:00:10.359 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:29:51.799 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39020 10 6452 1 2025-08-03 09:30:05.932 00:00:10.386 TCP 23.104.0.1:48060 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:26:05.654 00:06:00.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 09:30:52.011 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59300 10 6452 1 2025-08-03 09:26:05.652 00:06:00.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 09:31:06.361 00:00:10.360 TCP 23.104.0.1:35624 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:31:52.223 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53718 10 6452 1 2025-08-03 09:32:06.759 00:00:10.384 TCP 23.104.0.1:34458 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:32:37.687 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 09:32:37.504 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 09:32:52.435 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-08-03 09:33:07.185 00:00:10.324 TCP 23.104.0.1:37202 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:33:52.676 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36682 10 6452 1 2025-08-03 09:34:07.548 00:00:10.323 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:34:52.904 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52668 10 6452 1 2025-08-03 09:35:07.913 00:00:10.361 TCP 23.104.0.1:33564 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:35:53.121 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-08-03 09:36:08.312 00:00:10.366 TCP 23.104.0.1:33620 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:36:53.331 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42706 10 6452 1 2025-08-03 09:37:08.716 00:00:10.372 TCP 23.104.0.1:34198 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:37:37.650 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 09:37:37.663 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 09:37:53.542 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46522 10 6452 1 2025-08-03 09:33:05.654 00:06:00.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 09:33:05.657 00:06:00.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 09:38:09.125 00:00:10.363 TCP 23.104.0.1:48568 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:38:53.751 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52572 10 6452 1 2025-08-03 09:39:09.527 00:00:10.330 TCP 23.104.0.1:40516 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:39:53.962 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38478 10 6452 1 2025-08-03 09:40:09.898 00:00:10.324 TCP 23.104.0.1:40808 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:40:54.141 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44496 10 6452 1 2025-08-03 09:41:10.259 00:00:10.365 TCP 23.104.0.1:33402 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:41:54.358 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53646 10 6452 1 2025-08-03 09:42:10.669 00:00:10.378 TCP 23.104.0.1:45422 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:42:37.969 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 09:42:37.738 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 09:42:54.530 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47578 10 6452 1 2025-08-03 09:43:11.114 00:00:10.366 TCP 23.104.0.1:45820 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:43:54.703 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42726 10 6452 1 2025-08-03 09:44:11.518 00:00:10.366 TCP 23.104.0.1:59526 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:40:05.660 00:06:00.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 09:44:54.909 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49464 10 6452 1 2025-08-03 09:40:05.659 00:06:00.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 09:45:11.928 00:00:10.388 TCP 23.104.0.1:42606 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:45:55.117 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44348 10 6452 1 2025-08-03 09:46:12.352 00:00:10.360 TCP 23.104.0.1:49044 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:46:55.333 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41210 10 6452 1 2025-08-03 09:47:12.756 00:00:10.389 TCP 23.104.0.1:35772 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:47:37.694 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 09:47:37.654 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 09:47:55.557 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45556 10 6452 1 2025-08-03 09:48:13.187 00:00:10.362 TCP 23.104.0.1:40388 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:48:55.769 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60640 10 6452 1 2025-08-03 09:49:13.585 00:00:10.365 TCP 23.104.0.1:38474 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:49:55.978 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51552 10 6452 1 2025-08-03 09:50:13.990 00:00:10.330 TCP 23.104.0.1:35964 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:50:56.212 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48984 10 6452 1 2025-08-03 09:51:14.360 00:00:10.362 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:47:05.663 00:06:00.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 09:51:56.424 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53440 10 6452 1 2025-08-03 09:47:05.660 00:06:00.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 09:52:14.762 00:00:10.376 TCP 23.104.0.1:46722 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:52:37.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 09:52:37.885 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 09:52:56.597 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54640 10 6452 1 2025-08-03 09:53:15.177 00:00:10.333 TCP 23.104.0.1:39930 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:53:56.766 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43158 10 6452 1 2025-08-03 09:54:15.549 00:00:10.325 TCP 23.104.0.1:51110 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:54:56.985 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57432 10 6452 1 2025-08-03 09:55:15.906 00:00:10.367 TCP 23.104.0.1:55300 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:55:57.209 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49198 10 6452 1 2025-08-03 09:56:16.314 00:00:10.363 TCP 23.104.0.1:38922 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:56:57.390 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59360 10 6452 1 2025-08-03 09:57:16.716 00:00:10.377 TCP 23.104.0.1:36266 -> 1.101.0.1:3000 11 1507 1 2025-08-03 09:57:37.919 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 09:57:38.237 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 09:57:57.601 00:00:12.350 TCP 1.101.0.1:3000 -> 22.102.0.1:37868 10 6452 1 2025-08-03 09:58:17.131 00:00:10.366 TCP 23.104.0.1:52392 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 501748, total packets: 1563, avg bps: 1108, avg pps: 0, avg bpp: 321 Time window: 2025-08-03 08:58:05 - 2025-08-03 09:58:27 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0035s User: 0.0012s Wall: 0.0041s flows/second: 39302.4 Runtime: 0.0041s