Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 04:58:52.032 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51752 10 6452 1 2025-08-12 04:58:56.339 00:00:10.363 TCP 23.104.0.1:39034 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:55:09.952 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 04:59:52.241 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55098 10 6452 1 2025-08-12 04:59:56.741 00:00:10.364 TCP 23.104.0.1:37052 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:00:52.453 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47704 10 6452 1 2025-08-12 04:57:09.956 00:05:00.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 05:00:57.142 00:00:10.367 TCP 23.104.0.1:56218 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:01:51.945 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 05:01:51.887 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 05:01:52.666 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51826 10 6452 1 2025-08-12 05:01:57.550 00:00:10.367 TCP 23.104.0.1:55056 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:02:52.891 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52614 10 6452 1 2025-08-12 05:02:57.954 00:00:10.368 TCP 23.104.0.1:49794 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:03:53.109 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33354 10 6452 1 2025-08-12 05:03:58.360 00:00:10.325 TCP 23.104.0.1:53518 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:04:53.314 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41672 10 6452 1 2025-08-12 05:04:58.725 00:00:10.324 TCP 23.104.0.1:52080 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:01:09.953 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 05:05:53.487 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42976 10 6452 1 2025-08-12 05:05:59.110 00:00:10.324 TCP 23.104.0.1:34002 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:06:52.021 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 05:06:52.269 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 05:06:53.703 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52766 10 6452 1 2025-08-12 05:03:09.955 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 05:06:59.468 00:00:10.367 TCP 23.104.0.1:38064 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:07:53.920 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:42122 10 6452 1 2025-08-12 05:07:59.875 00:00:10.368 TCP 23.104.0.1:60482 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:08:54.122 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51928 10 6452 1 2025-08-12 05:09:00.277 00:00:10.366 TCP 23.104.0.1:40862 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:09:54.341 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:46938 10 6452 1 2025-08-12 05:10:00.678 00:00:11.731 TCP 23.104.0.1:54284 -> 1.101.0.1:3000 13 1611 1 2025-08-12 05:10:54.518 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46322 10 6452 1 2025-08-12 05:07:09.956 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 05:11:02.446 00:00:10.362 TCP 23.104.0.1:41608 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:11:52.001 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 05:11:52.140 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 05:11:54.735 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46376 10 6452 1 2025-08-12 05:12:02.841 00:00:10.386 TCP 23.104.0.1:39640 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:12:54.947 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35398 10 6452 1 2025-08-12 05:09:09.959 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 05:13:03.264 00:00:10.328 TCP 23.104.0.1:46030 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:13:55.176 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33940 10 6452 1 2025-08-12 05:14:03.627 00:00:10.361 TCP 23.104.0.1:38488 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:14:55.390 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:60498 12 10367 1 2025-08-12 05:15:04.052 00:00:10.443 TCP 23.104.0.1:48690 -> 1.101.0.1:3000 15 1926 1 2025-08-12 05:15:55.593 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44950 10 6452 1 2025-08-12 05:16:04.541 00:00:10.363 TCP 23.104.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:16:52.343 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 05:16:52.006 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 05:16:55.830 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45200 10 6452 1 2025-08-12 05:13:09.956 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 05:17:04.943 00:00:10.454 TCP 23.104.0.1:49638 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:17:56.015 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:32822 10 6452 1 2025-08-12 05:18:05.436 00:00:10.364 TCP 23.104.0.1:45286 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:18:56.238 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41794 10 6452 1 2025-08-12 05:15:09.959 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 05:19:05.840 00:00:10.383 TCP 23.104.0.1:59746 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:19:56.446 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40226 10 6452 1 2025-08-12 05:20:06.261 00:00:10.360 TCP 23.104.0.1:42018 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:20:56.667 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48726 10 6452 1 2025-08-12 05:21:06.661 00:00:10.363 TCP 23.104.0.1:34166 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:21:52.490 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 05:21:52.540 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 05:21:56.842 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57664 10 6452 1 2025-08-12 05:22:07.090 00:00:10.365 TCP 23.104.0.1:51882 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:19:09.958 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 05:22:57.081 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49310 10 6452 1 2025-08-12 05:23:07.500 00:00:10.368 TCP 23.104.0.1:38492 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:23:57.255 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:39768 10 6452 1 2025-08-12 05:24:07.904 00:00:10.368 TCP 23.104.0.1:34212 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:21:09.962 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 05:24:57.424 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57712 10 6452 1 2025-08-12 05:25:08.326 00:00:10.362 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:25:57.641 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59620 10 6452 1 2025-08-12 05:26:08.728 00:00:10.372 TCP 23.104.0.1:41386 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:26:52.532 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 05:26:52.535 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 05:26:57.853 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42664 10 6452 1 2025-08-12 05:27:09.148 00:00:10.364 TCP 23.104.0.1:53498 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:27:58.025 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40090 10 6452 1 2025-08-12 05:28:09.551 00:00:10.360 TCP 23.104.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:25:09.959 00:05:00.866 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 05:28:58.239 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36028 10 6452 1 2025-08-12 05:29:09.951 00:00:10.367 TCP 23.104.0.1:56360 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:29:58.458 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54248 10 6452 1 2025-08-12 05:30:10.367 00:00:10.367 TCP 23.104.0.1:37430 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:30:58.669 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43532 10 6452 1 2025-08-12 05:27:09.962 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 05:31:10.792 00:00:10.343 TCP 23.104.0.1:44466 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:31:52.408 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 05:31:52.459 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 05:31:58.888 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37196 10 6452 1 2025-08-12 05:32:11.173 00:00:10.367 TCP 23.104.0.1:46424 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:32:59.102 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48330 10 6452 1 2025-08-12 05:33:11.583 00:00:10.364 TCP 23.104.0.1:54920 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:33:59.309 00:00:10.458 TCP 1.101.0.1:3000 -> 22.102.0.1:54100 10 6452 1 2025-08-12 05:34:11.984 00:00:10.366 TCP 23.104.0.1:50976 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:31:09.962 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 05:34:59.807 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52282 10 6452 1 2025-08-12 05:35:12.385 00:00:10.327 TCP 23.104.0.1:37758 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:35:59.975 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52638 10 6452 1 2025-08-12 05:36:12.753 00:00:10.389 TCP 23.104.0.1:35410 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:36:52.524 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 05:36:52.762 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 05:37:00.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59774 10 6452 1 2025-08-12 05:33:09.963 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 05:37:13.176 00:00:10.366 TCP 23.104.0.1:49244 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:38:00.425 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57032 10 6452 1 2025-08-12 05:38:13.578 00:00:10.362 TCP 23.104.0.1:39472 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:39:00.599 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47496 10 6452 1 2025-08-12 05:39:13.984 00:00:10.373 TCP 23.104.0.1:37124 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:40:00.772 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41674 10 6452 1 2025-08-12 05:40:14.401 00:00:10.366 TCP 23.104.0.1:57784 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:41:00.987 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43290 10 6452 1 2025-08-12 05:37:09.962 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 05:41:14.806 00:00:10.331 TCP 23.104.0.1:46510 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:41:52.755 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 05:41:52.870 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 05:42:01.207 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58270 10 6452 1 2025-08-12 05:42:15.171 00:00:10.367 TCP 23.104.0.1:46508 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:39:09.965 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 05:43:01.426 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45186 10 6452 1 2025-08-12 05:43:15.580 00:00:10.328 TCP 23.104.0.1:47404 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:44:01.592 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35510 10 6452 1 2025-08-12 05:44:15.951 00:00:10.371 TCP 23.104.0.1:49860 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:45:01.808 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46090 10 6452 1 2025-08-12 05:45:16.359 00:00:10.365 TCP 23.104.0.1:33800 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:46:02.036 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46122 10 6452 1 2025-08-12 05:46:16.763 00:00:10.384 TCP 23.104.0.1:53656 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:46:52.925 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 05:46:52.915 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 05:43:09.964 00:05:00.870 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 05:47:02.251 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34344 10 6452 1 2025-08-12 05:47:17.183 00:00:10.371 TCP 23.104.0.1:46924 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:48:02.477 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35470 10 6452 1 2025-08-12 05:48:17.592 00:00:10.400 TCP 23.104.0.1:41984 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:45:09.967 00:05:00.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 05:49:02.688 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58148 10 6452 1 2025-08-12 05:49:17.997 00:00:10.366 TCP 23.104.0.1:37608 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:50:02.863 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48914 10 6452 1 2025-08-12 05:50:18.399 00:00:10.364 TCP 23.104.0.1:34670 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:51:03.097 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47394 10 6452 1 2025-08-12 05:51:18.803 00:00:10.337 TCP 23.104.0.1:47888 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:51:52.934 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 05:51:53.079 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 05:52:03.308 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44136 10 6452 1 2025-08-12 05:52:19.176 00:00:10.328 TCP 23.104.0.1:51062 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:49:09.976 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 05:53:03.478 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54264 10 6452 1 2025-08-12 05:53:19.540 00:00:10.365 TCP 23.104.0.1:42630 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:54:03.688 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44354 10 6452 1 2025-08-12 05:54:19.940 00:00:10.375 TCP 23.104.0.1:55744 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:51:09.977 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 05:55:03.911 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43122 10 6452 1 2025-08-12 05:55:20.349 00:00:10.368 TCP 23.104.0.1:36836 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:56:04.095 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:48904 10 6452 1 2025-08-12 05:56:20.756 00:00:22.663 TCP 23.104.0.1:40238 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:56:52.969 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 05:56:53.176 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 05:57:04.333 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55316 10 6452 1 2025-08-12 05:57:33.457 00:00:10.363 TCP 23.104.0.1:57604 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:58:04.562 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51600 10 6452 1 2025-08-12 05:58:33.857 00:00:10.338 TCP 23.104.0.1:56026 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1054, avg pps: 0, avg bpp: 318 Time window: 2025-08-12 04:55:09 - 2025-08-12 05:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0012s Wall: 0.0023s flows/second: 70811.8 Runtime: 0.0023s