Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-07 00:58:57.015 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52886 12 10365 1 2025-08-07 00:59:22.653 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 00:59:22.499 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 00:59:27.546 00:00:10.371 TCP 23.104.0.1:59598 -> 1.101.0.1:3000 11 1507 1 2025-08-07 00:59:57.231 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44324 10 6452 1 2025-08-07 01:00:27.960 00:00:10.363 TCP 23.104.0.1:58086 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:00:57.441 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48854 10 6452 1 2025-08-07 01:01:28.364 00:00:10.317 TCP 23.104.0.1:47678 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:01:57.654 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56922 10 6452 1 2025-08-07 01:02:28.724 00:00:10.370 TCP 23.104.0.1:50826 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:02:57.869 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39520 10 6452 1 2025-08-07 00:59:07.390 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 01:03:29.132 00:00:10.369 TCP 23.104.0.1:43112 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:03:58.090 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35060 10 6452 1 2025-08-07 01:00:07.388 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 01:04:23.015 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 01:04:22.990 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 01:04:29.541 00:00:10.322 TCP 23.104.0.1:60124 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:04:58.298 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 10 6452 1 2025-08-07 01:05:29.902 00:00:10.361 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:05:58.515 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35964 10 6452 1 2025-08-07 01:06:30.302 00:00:10.325 TCP 23.104.0.1:40786 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:06:58.729 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40398 10 6452 1 2025-08-07 01:07:30.672 00:00:10.361 TCP 23.104.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:07:58.940 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:39418 10 6452 1 2025-08-07 01:08:31.100 00:00:10.364 TCP 23.104.0.1:55426 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:08:59.140 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48108 10 6452 1 2025-08-07 01:05:07.397 00:05:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 01:09:23.457 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 01:09:23.414 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 01:09:31.501 00:00:10.365 TCP 23.104.0.1:42764 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:09:59.359 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39414 10 6452 1 2025-08-07 01:06:07.396 00:05:00.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 01:10:31.908 00:00:10.368 TCP 23.104.0.1:59466 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:10:59.526 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48850 10 6452 1 2025-08-07 01:11:32.311 00:00:10.365 TCP 23.104.0.1:57840 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:11:59.697 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43394 10 6452 1 2025-08-07 01:12:32.719 00:00:10.381 TCP 23.104.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:12:59.876 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34808 10 6452 1 2025-08-07 01:13:33.137 00:00:10.364 TCP 23.104.0.1:47742 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:14:00.078 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40152 10 6452 1 2025-08-07 01:14:23.125 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 01:14:23.394 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 01:14:33.539 00:00:10.368 TCP 23.104.0.1:34680 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:15:00.289 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33728 10 6452 1 2025-08-07 01:11:07.400 00:05:00.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 01:15:33.944 00:00:10.341 TCP 23.104.0.1:56138 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:16:00.457 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:42774 10 6452 1 2025-08-07 01:12:07.396 00:05:00.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 01:16:34.331 00:00:10.372 TCP 23.104.0.1:45082 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:17:00.661 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48922 10 6452 1 2025-08-07 01:17:34.740 00:00:10.400 TCP 23.104.0.1:41670 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:18:00.874 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45250 10 6452 1 2025-08-07 01:18:35.182 00:00:10.366 TCP 23.104.0.1:39066 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:19:01.061 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40032 10 6452 1 2025-08-07 01:19:23.289 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 01:19:23.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 01:19:35.589 00:00:10.364 TCP 23.104.0.1:45222 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:20:01.277 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35798 10 6452 1 2025-08-07 01:20:35.996 00:00:10.368 TCP 23.104.0.1:50992 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:21:01.492 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52750 10 6452 1 2025-08-07 01:17:07.399 00:05:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 01:21:36.399 00:00:10.328 TCP 23.104.0.1:50522 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:22:01.714 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41624 10 6452 1 2025-08-07 01:18:07.396 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 01:22:36.774 00:00:10.332 TCP 23.104.0.1:45304 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:23:01.884 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46264 10 6452 1 2025-08-07 01:23:37.145 00:00:10.322 TCP 23.104.0.1:58530 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:24:02.085 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42792 10 6452 1 2025-08-07 01:24:23.271 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 01:24:23.362 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 01:24:37.507 00:00:10.367 TCP 23.104.0.1:51684 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:25:02.259 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38886 10 6452 1 2025-08-07 01:25:37.915 00:00:10.365 TCP 23.104.0.1:60212 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:26:02.473 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60330 10 6452 1 2025-08-07 01:26:38.324 00:00:10.369 TCP 23.104.0.1:34826 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:23:07.401 00:05:00.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 01:27:02.681 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33644 10 6452 1 2025-08-07 01:27:38.726 00:00:10.379 TCP 23.104.0.1:52348 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:24:07.398 00:05:00.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 01:28:02.902 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:33340 10 6452 1 2025-08-07 01:28:39.142 00:00:10.442 TCP 23.104.0.1:60244 -> 1.101.0.1:3000 15 1926 1 2025-08-07 01:29:03.078 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54198 12 10367 1 2025-08-07 01:29:23.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 01:29:23.452 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 01:29:39.629 00:00:10.375 TCP 23.104.0.1:53238 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:30:03.312 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35904 10 6452 1 2025-08-07 01:30:40.044 00:00:10.328 TCP 23.104.0.1:57278 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:31:03.531 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43524 10 6452 1 2025-08-07 01:31:40.408 00:00:10.365 TCP 23.104.0.1:36348 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:32:03.746 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54246 10 6452 1 2025-08-07 01:32:40.811 00:00:10.364 TCP 23.104.0.1:58906 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:29:07.403 00:05:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 01:33:03.956 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47322 10 6452 1 2025-08-07 01:33:41.210 00:00:10.366 TCP 23.104.0.1:33052 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:30:07.403 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 01:34:04.187 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41664 10 6452 1 2025-08-07 01:34:23.421 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 01:34:23.575 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 01:34:41.614 00:00:10.366 TCP 23.104.0.1:44048 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:35:04.396 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33418 10 6452 1 2025-08-07 01:35:42.023 00:00:10.361 TCP 23.104.0.1:35400 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:36:04.613 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51186 10 6452 1 2025-08-07 01:36:42.422 00:00:10.369 TCP 23.104.0.1:59878 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:37:04.832 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43098 10 6452 1 2025-08-07 01:37:42.826 00:00:10.397 TCP 23.104.0.1:35822 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:38:05.003 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41014 10 6452 1 2025-08-07 01:38:43.259 00:00:10.369 TCP 23.104.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:35:07.406 00:05:00.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 01:39:05.214 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47506 10 6452 1 2025-08-07 01:39:23.834 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 01:39:23.489 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 01:39:43.669 00:00:10.325 TCP 23.104.0.1:46020 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:36:07.404 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 01:40:05.389 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47254 10 6452 1 2025-08-07 01:40:44.033 00:00:10.364 TCP 23.104.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:41:05.628 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48720 10 6452 1 2025-08-07 01:41:44.431 00:00:10.369 TCP 23.104.0.1:36016 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:42:05.799 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57406 10 6452 1 2025-08-07 01:42:44.836 00:00:10.389 TCP 23.104.0.1:49408 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:43:06.031 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37948 10 6452 1 2025-08-07 01:43:45.264 00:00:10.365 TCP 23.104.0.1:34386 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:44:06.245 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46982 10 6452 1 2025-08-07 01:44:23.745 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 01:44:23.680 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 01:44:45.662 00:00:10.387 TCP 23.104.0.1:60636 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:41:07.408 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 01:45:06.474 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45452 10 6452 1 2025-08-07 01:45:46.117 00:00:10.325 TCP 23.104.0.1:44834 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:42:07.407 00:05:00.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 01:46:06.688 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44168 10 6452 1 2025-08-07 01:46:46.483 00:00:10.360 TCP 23.104.0.1:50274 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:47:06.903 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59302 10 6452 1 2025-08-07 01:47:46.883 00:00:10.369 TCP 23.104.0.1:57358 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:48:07.118 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35404 10 6452 1 2025-08-07 01:48:47.290 00:00:10.375 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:49:07.340 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55204 10 6452 1 2025-08-07 01:49:23.957 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 01:49:23.787 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 01:49:47.706 00:00:10.384 TCP 23.104.0.1:38888 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:50:07.566 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57826 10 6452 1 2025-08-07 01:50:48.131 00:00:10.368 TCP 23.104.0.1:54704 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:47:07.410 00:05:00.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 01:51:07.787 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60064 10 6452 1 2025-08-07 01:51:48.540 00:00:10.367 TCP 23.104.0.1:58344 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:48:07.408 00:05:00.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 01:52:07.998 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40148 10 6452 1 2025-08-07 01:52:48.946 00:00:10.331 TCP 23.104.0.1:51210 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:53:08.216 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59602 10 6452 1 2025-08-07 01:53:49.312 00:00:10.319 TCP 23.104.0.1:45780 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:54:08.437 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53066 10 6452 1 2025-08-07 01:54:23.937 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 01:54:23.873 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 01:54:49.674 00:00:10.392 TCP 23.104.0.1:44224 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:55:08.653 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39706 10 6452 1 2025-08-07 01:55:50.122 00:00:10.328 TCP 23.104.0.1:38536 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:56:08.823 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 10 6452 1 2025-08-07 01:56:50.493 00:00:10.325 TCP 23.104.0.1:55630 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:53:07.412 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 01:57:09.066 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44178 10 6452 1 2025-08-07 01:57:50.854 00:00:10.375 TCP 23.104.0.1:47928 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:54:07.410 00:05:00.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 01:58:09.241 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36014 10 6452 1 Summary: total flows: 163, total bytes: 505088, total packets: 1569, avg bps: 1118, avg pps: 0, avg bpp: 321 Time window: 2025-08-07 00:58:57 - 2025-08-07 01:59:08 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0019s Wall: 0.0027s flows/second: 59553.3 Runtime: 0.0028s