Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 05:58:54.557 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56484 10 6452 1 2025-08-13 05:58:56.036 00:00:10.363 TCP 23.104.0.1:34224 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:59:54.770 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:39802 12 10367 1 2025-08-13 05:59:56.448 00:00:10.396 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 15 1926 1 2025-08-13 05:56:10.556 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 06:00:54.972 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:44086 10 6452 1 2025-08-13 06:00:56.883 00:00:11.031 TCP 23.104.0.1:57186 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:57:10.558 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 06:01:55.224 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59310 10 6452 1 2025-08-13 06:01:57.951 00:00:10.365 TCP 23.104.0.1:51696 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:02:22.057 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 06:02:22.149 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 06:02:55.432 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36636 10 6452 1 2025-08-13 06:02:58.365 00:00:10.366 TCP 23.104.0.1:44342 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:03:55.604 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47612 10 6452 1 2025-08-13 06:03:58.770 00:00:10.380 TCP 23.104.0.1:37472 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:04:55.778 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38820 10 6452 1 2025-08-13 06:04:59.211 00:00:10.377 TCP 23.104.0.1:48994 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:05:55.990 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40306 10 6452 1 2025-08-13 06:05:59.625 00:00:10.324 TCP 23.104.0.1:46554 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:02:10.556 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 06:06:56.222 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38956 10 6452 1 2025-08-13 06:06:59.991 00:00:10.322 TCP 23.104.0.1:50258 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:03:10.559 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 06:07:22.002 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 06:07:22.241 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 06:07:56.432 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:39000 10 6452 1 2025-08-13 06:08:00.356 00:00:10.371 TCP 23.104.0.1:55942 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:08:56.673 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54274 10 6452 1 2025-08-13 06:09:00.764 00:00:10.385 TCP 23.104.0.1:42318 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:10:01.191 00:00:10.368 TCP 23.104.0.1:37662 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:09:56.887 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54782 10 6452 1 2025-08-13 06:11:01.595 00:00:10.363 TCP 23.104.0.1:33362 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:10:57.101 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42112 10 6452 1 2025-08-13 06:11:57.314 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38744 10 6452 1 2025-08-13 06:08:10.557 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 06:12:01.996 00:00:10.326 TCP 23.104.0.1:45558 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:12:22.246 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 06:12:22.163 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 06:12:57.523 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37696 10 6452 1 2025-08-13 06:09:10.562 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 06:13:02.361 00:00:10.375 TCP 23.104.0.1:42440 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:13:57.735 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40710 10 6452 1 2025-08-13 06:14:02.766 00:00:10.382 TCP 23.104.0.1:52022 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:14:57.948 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33306 10 6452 1 2025-08-13 06:15:03.183 00:00:10.371 TCP 23.104.0.1:49528 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:15:58.168 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50856 10 6452 1 2025-08-13 06:16:03.587 00:00:10.325 TCP 23.104.0.1:33402 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:16:58.379 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34322 10 6452 1 2025-08-13 06:17:03.950 00:00:10.365 TCP 23.104.0.1:51434 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:17:22.282 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 06:17:22.238 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 06:14:10.559 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 06:17:58.547 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42130 10 6452 1 2025-08-13 06:18:04.351 00:00:10.322 TCP 23.104.0.1:55248 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:15:10.562 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 06:18:58.764 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:60664 10 6452 1 2025-08-13 06:19:04.712 00:00:10.383 TCP 23.104.0.1:56694 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:19:58.982 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40466 10 6452 1 2025-08-13 06:20:05.139 00:00:10.366 TCP 23.104.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:20:59.201 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33284 11 6504 1 2025-08-13 06:21:05.542 00:00:10.324 TCP 23.104.0.1:39470 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:21:59.431 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48768 10 6452 1 2025-08-13 06:22:05.903 00:00:10.368 TCP 23.104.0.1:51608 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:22:22.548 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 06:22:22.325 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 06:22:59.647 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45126 10 6452 1 2025-08-13 06:23:06.314 00:00:10.336 TCP 23.104.0.1:52830 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:23:59.819 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49702 10 6452 1 2025-08-13 06:20:10.560 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 06:24:06.691 00:00:10.379 TCP 23.104.0.1:33690 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:25:00.036 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59688 12 10365 1 2025-08-13 06:21:10.562 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 06:25:07.124 00:00:10.444 TCP 23.104.0.1:34910 -> 1.101.0.1:3000 15 1926 1 2025-08-13 06:26:00.272 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47978 10 6452 1 2025-08-13 06:26:07.602 00:00:10.364 TCP 23.104.0.1:34786 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:27:00.481 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34156 10 6452 1 2025-08-13 06:27:08.010 00:00:10.362 TCP 23.104.0.1:37982 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:27:22.512 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 06:27:22.541 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 06:28:00.688 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56226 10 6452 1 2025-08-13 06:28:08.418 00:00:10.364 TCP 23.104.0.1:47780 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:29:00.899 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52472 10 6452 1 2025-08-13 06:29:08.825 00:00:10.361 TCP 23.104.0.1:47326 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:30:01.116 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51512 10 6452 1 2025-08-13 06:26:10.561 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 06:30:09.227 00:00:10.363 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:31:01.330 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:45314 10 6452 1 2025-08-13 06:27:10.564 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 06:31:09.626 00:00:10.371 TCP 23.104.0.1:41152 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:32:01.500 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44846 10 6452 1 2025-08-13 06:32:10.027 00:00:10.364 TCP 23.104.0.1:40938 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:32:22.415 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 06:32:22.695 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 06:33:01.716 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53160 10 6452 1 2025-08-13 06:33:10.428 00:00:10.364 TCP 23.104.0.1:43722 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:34:01.933 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:44404 10 6452 1 2025-08-13 06:34:10.828 00:00:10.336 TCP 23.104.0.1:50312 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:35:02.171 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45084 10 6452 1 2025-08-13 06:35:11.208 00:00:10.370 TCP 23.104.0.1:43864 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:32:10.563 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 06:36:02.342 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:46168 10 6452 1 2025-08-13 06:36:11.622 00:00:10.369 TCP 23.104.0.1:46574 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:37:02.618 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39282 10 6452 1 2025-08-13 06:33:10.567 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 06:37:22.951 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 06:37:22.822 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 06:37:12.028 00:00:10.321 TCP 23.104.0.1:58722 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:38:02.831 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51946 10 6452 1 2025-08-13 06:38:12.388 00:00:10.327 TCP 23.104.0.1:58254 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:39:03.008 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43250 10 6452 1 2025-08-13 06:39:12.755 00:00:10.387 TCP 23.104.0.1:44340 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:40:03.181 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-08-13 06:40:13.180 00:00:10.362 TCP 23.104.0.1:46758 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:41:03.357 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37666 10 6452 1 2025-08-13 06:41:13.578 00:00:10.364 TCP 23.104.0.1:57578 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:38:10.566 00:05:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 06:42:03.565 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36406 10 6452 1 2025-08-13 06:42:22.687 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 06:42:22.770 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 06:42:13.989 00:00:10.366 TCP 23.104.0.1:48578 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:39:10.569 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 06:43:03.780 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48712 10 6452 1 2025-08-13 06:43:14.398 00:00:10.919 TCP 23.104.0.1:45050 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:44:03.961 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:46122 10 6452 1 2025-08-13 06:44:15.358 00:00:10.328 TCP 23.104.0.1:45188 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:45:04.157 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:52768 10 6452 1 2025-08-13 06:45:15.730 00:00:10.373 TCP 23.104.0.1:33582 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:46:04.370 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35070 10 6452 1 2025-08-13 06:46:16.143 00:00:10.363 TCP 23.104.0.1:53572 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:47:04.585 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59412 10 6452 1 2025-08-13 06:47:23.049 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 06:47:16.541 00:00:10.365 TCP 23.104.0.1:40500 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:47:22.984 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 06:44:10.566 00:05:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 06:48:04.753 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51776 10 6452 1 2025-08-13 06:48:16.945 00:00:10.379 TCP 23.104.0.1:56364 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:45:10.573 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 06:49:04.927 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42690 12 6556 1 2025-08-13 06:49:17.358 00:00:10.367 TCP 23.104.0.1:56694 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:50:05.170 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59962 10 6452 1 2025-08-13 06:50:17.766 00:00:10.376 TCP 23.104.0.1:35262 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:51:05.382 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41712 10 6452 1 2025-08-13 06:51:18.181 00:00:10.358 TCP 23.104.0.1:46918 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:52:05.556 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54032 10 6452 1 2025-08-13 06:52:22.738 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 06:52:22.880 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 06:52:18.580 00:00:10.324 TCP 23.104.0.1:59558 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:53:05.775 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52488 10 6452 1 2025-08-13 06:53:18.945 00:00:10.370 TCP 23.104.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:54:05.984 00:00:10.412 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-08-13 06:50:10.576 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 06:54:19.357 00:00:10.372 TCP 23.104.0.1:49932 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:55:06.432 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48872 10 6452 1 2025-08-13 06:51:10.577 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 06:55:19.764 00:00:10.333 TCP 23.104.0.1:54130 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:56:06.602 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50398 10 6452 1 2025-08-13 06:56:20.134 00:00:10.367 TCP 23.104.0.1:39174 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:57:06.820 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59254 10 6452 1 2025-08-13 06:57:23.428 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 06:57:23.376 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 06:57:20.540 00:00:10.364 TCP 23.104.0.1:54690 -> 1.101.0.1:3000 11 1507 1 2025-08-13 06:58:06.995 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46218 10 6452 1 2025-08-13 06:58:20.944 00:00:10.381 TCP 23.104.0.1:51134 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507170, total packets: 1587, avg bps: 1084, avg pps: 0, avg bpp: 319 Time window: 2025-08-13 05:56:10 - 2025-08-13 06:58:31 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0011s Wall: 0.0016s flows/second: 101996.7 Runtime: 0.0016s