Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-22 08:58:58.663 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55268 10 6452 1 2025-08-22 08:54:15.216 00:06:00.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 08:59:39.708 00:00:10.386 TCP 23.104.0.1:56804 -> 1.101.0.1:3000 11 1507 1 2025-08-22 08:59:58.878 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59094 10 6452 1 2025-08-22 09:00:40.113 00:00:10.328 TCP 23.104.0.1:58338 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:00:59.110 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58726 10 6452 1 2025-08-22 09:01:45.478 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 09:01:45.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 09:01:40.479 00:00:10.587 TCP 23.104.0.1:36900 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:01:59.320 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53224 10 6452 1 2025-08-22 09:02:41.117 00:00:10.364 TCP 23.104.0.1:47288 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:02:59.538 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50066 10 6452 1 2025-08-22 09:03:41.524 00:00:10.365 TCP 23.104.0.1:55432 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:03:59.749 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47080 10 6452 1 2025-08-22 08:59:15.220 00:06:00.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 09:04:41.928 00:00:10.343 TCP 23.104.0.1:40828 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:04:59.957 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:57794 10 6452 1 2025-08-22 09:05:42.309 00:00:10.370 TCP 23.104.0.1:42438 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:06:00.141 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56734 10 6452 1 2025-08-22 09:01:15.218 00:06:00.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 09:06:45.838 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 09:06:45.803 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 09:06:42.716 00:00:10.381 TCP 23.104.0.1:43788 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:07:00.350 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45438 10 6452 1 2025-08-22 09:07:43.148 00:00:10.366 TCP 23.104.0.1:52500 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:08:00.568 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53500 10 6452 1 2025-08-22 09:08:43.554 00:00:10.368 TCP 23.104.0.1:53110 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:09:00.732 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44966 10 6452 1 2025-08-22 09:09:43.958 00:00:10.335 TCP 23.104.0.1:44468 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:10:00.905 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48106 10 6452 1 2025-08-22 09:10:44.370 00:00:10.323 TCP 23.104.0.1:51924 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:11:01.115 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58782 10 6452 1 2025-08-22 09:06:15.224 00:06:00.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 09:11:45.785 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 09:11:45.817 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 09:11:44.735 00:00:10.323 TCP 23.104.0.1:36944 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:12:01.325 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38106 10 6452 1 2025-08-22 09:12:45.106 00:00:10.368 TCP 23.104.0.1:57266 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:13:01.540 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38644 10 6452 1 2025-08-22 09:08:15.220 00:06:00.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 09:13:45.511 00:00:10.327 TCP 23.104.0.1:45062 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:14:01.747 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6452 1 2025-08-22 09:14:45.874 00:00:10.363 TCP 23.104.0.1:42930 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:15:01.961 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37702 12 6556 1 2025-08-22 09:15:46.278 00:00:10.387 TCP 23.104.0.1:33760 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:16:02.189 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58870 10 6452 1 2025-08-22 09:16:45.887 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 09:16:45.908 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 09:16:46.702 00:00:10.329 TCP 23.104.0.1:54548 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:17:02.406 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50532 10 6452 1 2025-08-22 09:17:47.096 00:00:10.369 TCP 23.104.0.1:33760 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:18:02.619 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54690 10 6452 1 2025-08-22 09:13:15.224 00:06:00.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 09:18:47.503 00:00:10.327 TCP 23.104.0.1:43604 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:19:02.796 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51742 10 6452 1 2025-08-22 09:19:47.869 00:00:10.371 TCP 23.104.0.1:33078 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:20:03.010 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38664 10 6452 1 2025-08-22 09:15:15.222 00:06:00.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 09:20:48.278 00:00:10.364 TCP 23.104.0.1:35992 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:21:03.187 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50380 10 6452 1 2025-08-22 09:21:46.036 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 09:21:45.929 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 09:21:48.673 00:00:10.323 TCP 23.104.0.1:41528 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:22:03.399 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53614 10 6452 1 2025-08-22 09:22:49.034 00:00:10.364 TCP 23.104.0.1:54288 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:23:03.614 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59212 10 6452 1 2025-08-22 09:23:49.438 00:00:10.358 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:24:03.842 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52996 10 6452 1 2025-08-22 09:24:49.842 00:00:10.382 TCP 23.104.0.1:59348 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:25:04.080 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37408 10 6452 1 2025-08-22 09:20:15.225 00:06:00.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 09:25:50.271 00:00:10.362 TCP 23.104.0.1:48314 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:26:04.297 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44586 10 6452 1 2025-08-22 09:26:46.135 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 09:26:46.068 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 09:26:50.676 00:00:10.369 TCP 23.104.0.1:52132 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:27:04.511 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40182 10 6452 1 2025-08-22 09:22:15.223 00:06:00.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 09:27:51.107 00:00:10.362 TCP 23.104.0.1:50172 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:28:04.732 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42900 10 6452 1 2025-08-22 09:28:51.513 00:00:10.325 TCP 23.104.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:29:04.905 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36908 10 6452 1 2025-08-22 09:29:51.880 00:00:10.370 TCP 23.104.0.1:48222 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:30:05.121 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34420 10 6452 1 2025-08-22 09:30:52.290 00:00:10.366 TCP 23.104.0.1:59086 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:31:05.335 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47590 12 6556 1 2025-08-22 09:31:47.177 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 09:31:47.077 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 09:31:52.694 00:00:10.366 TCP 23.104.0.1:55188 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:27:15.226 00:06:00.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 09:32:05.549 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-08-22 09:32:53.110 00:00:10.363 TCP 23.104.0.1:36762 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:33:05.760 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44532 10 6452 1 2025-08-22 09:33:53.514 00:00:10.364 TCP 23.104.0.1:48902 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:34:05.978 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:41006 10 6452 1 2025-08-22 09:29:15.224 00:06:00.701 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 09:34:53.916 00:00:10.366 TCP 23.104.0.1:47546 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:35:06.212 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40944 10 6452 1 2025-08-22 09:35:54.321 00:00:10.364 TCP 23.104.0.1:33558 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:36:06.422 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42460 10 6452 1 2025-08-22 09:36:46.313 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 09:36:46.501 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 09:36:54.722 00:00:10.372 TCP 23.104.0.1:49532 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:37:06.647 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43014 10 6452 1 2025-08-22 09:37:55.133 00:00:10.326 TCP 23.104.0.1:46912 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:38:06.858 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50134 10 6452 1 2025-08-22 09:38:55.496 00:00:10.366 TCP 23.104.0.1:50020 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:34:15.234 00:06:00.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 09:39:07.091 00:00:18.213 TCP 1.101.0.1:3000 -> 22.102.0.1:42422 10 6452 1 2025-08-22 09:39:55.906 00:00:10.368 TCP 23.104.0.1:44790 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:40:15.341 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38142 10 6452 1 2025-08-22 09:40:56.315 00:00:10.334 TCP 23.104.0.1:46338 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:36:15.233 00:06:00.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 09:41:15.557 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34966 10 6452 1 2025-08-22 09:41:46.444 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 09:41:46.425 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 09:41:56.689 00:00:10.335 TCP 23.104.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:42:15.766 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35032 10 6452 1 2025-08-22 09:42:57.090 00:00:10.368 TCP 23.104.0.1:51646 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:43:15.938 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56182 10 6452 1 2025-08-22 09:43:57.496 00:00:10.326 TCP 23.104.0.1:51506 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:44:16.169 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56598 10 6452 1 2025-08-22 09:44:57.864 00:00:10.381 TCP 23.104.0.1:39686 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:45:16.380 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33036 10 6452 1 2025-08-22 09:45:58.290 00:00:10.372 TCP 23.104.0.1:42700 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:41:15.235 00:06:00.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 09:46:16.602 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:52306 10 6452 1 2025-08-22 09:46:46.766 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 09:46:46.594 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 09:46:58.699 00:00:10.374 TCP 23.104.0.1:56298 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:47:16.766 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43698 10 6452 1 2025-08-22 09:47:59.107 00:00:10.319 TCP 23.104.0.1:54102 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:43:15.233 00:06:00.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 09:48:16.976 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36152 10 6452 1 2025-08-22 09:48:59.468 00:00:10.364 TCP 23.104.0.1:40334 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:49:17.210 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43238 10 6452 1 2025-08-22 09:49:59.868 00:00:10.367 TCP 23.104.0.1:57082 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:50:17.426 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53652 10 6452 1 2025-08-22 09:51:00.272 00:00:10.437 TCP 23.104.0.1:49356 -> 1.101.0.1:3000 15 1926 1 2025-08-22 09:51:17.646 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:34240 12 10367 1 2025-08-22 09:51:46.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 09:51:46.845 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 09:52:00.744 00:00:10.398 TCP 23.104.0.1:58802 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:52:17.888 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50572 10 6452 1 2025-08-22 09:53:01.182 00:00:10.320 TCP 23.104.0.1:34386 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:48:15.247 00:06:00.678 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 09:53:18.118 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35962 10 6452 1 2025-08-22 09:54:01.540 00:00:10.365 TCP 23.104.0.1:47168 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:54:18.648 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52414 10 6452 1 2025-08-22 09:50:15.242 00:06:00.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 09:55:01.945 00:00:10.331 TCP 23.104.0.1:38702 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:55:18.819 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59420 10 6452 1 2025-08-22 09:56:02.314 00:00:10.370 TCP 23.104.0.1:34858 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:56:19.060 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42220 10 6452 1 2025-08-22 09:56:46.712 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 09:56:46.754 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 09:57:02.724 00:00:10.370 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:57:19.279 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52324 10 6452 1 2025-08-22 09:58:03.134 00:00:10.360 TCP 23.104.0.1:59958 -> 1.101.0.1:3000 11 1507 1 2025-08-22 09:58:19.502 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36960 10 6452 1 Summary: total flows: 160, total bytes: 501260, total packets: 1569, avg bps: 1040, avg pps: 0, avg bpp: 319 Time window: 2025-08-22 08:54:15 - 2025-08-22 09:58:29 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0023s User: 0.0023s Wall: 0.0031s flows/second: 52338.8 Runtime: 0.0031s