Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 04:58:55.533 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46016 10 6452 1 2025-08-23 04:59:10.515 00:00:10.323 TCP 23.104.0.1:56138 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:59:55.713 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48706 10 6452 1 2025-08-23 05:00:10.877 00:00:10.365 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:00:55.886 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:47946 12 10367 1 2025-08-23 05:01:11.280 00:00:10.437 TCP 23.104.0.1:50060 -> 1.101.0.1:3000 15 1926 1 2025-08-23 05:01:56.139 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57710 10 6452 1 2025-08-23 05:02:09.680 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 05:02:09.759 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 05:02:11.758 00:00:10.388 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:02:56.356 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55234 10 6452 1 2025-08-23 04:59:15.782 00:05:00.521 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 05:03:12.180 00:00:10.374 TCP 23.104.0.1:37884 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:03:56.569 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36906 10 6452 1 2025-08-23 05:00:15.781 00:05:00.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 05:04:12.597 00:00:10.368 TCP 23.104.0.1:41968 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:04:56.785 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60220 10 6452 1 2025-08-23 05:05:13.004 00:00:10.324 TCP 23.104.0.1:54136 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:05:57.001 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:52536 12 10365 1 2025-08-23 05:06:13.364 00:00:10.399 TCP 23.104.0.1:40580 -> 1.101.0.1:3000 15 1926 1 2025-08-23 05:06:57.243 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45218 10 6452 1 2025-08-23 05:07:09.942 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 05:07:10.015 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 05:07:13.805 00:00:10.371 TCP 23.104.0.1:33884 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:07:57.422 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39306 10 6452 1 2025-08-23 05:08:14.221 00:00:10.318 TCP 23.104.0.1:50168 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:08:57.642 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46328 10 6452 1 2025-08-23 05:05:15.785 00:05:00.521 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 05:09:14.579 00:00:10.363 TCP 23.104.0.1:41616 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:09:57.814 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41078 10 6452 1 2025-08-23 05:06:15.782 00:05:00.526 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 05:10:14.983 00:00:10.374 TCP 23.104.0.1:58268 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:10:58.034 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37154 10 6452 1 2025-08-23 05:11:15.396 00:00:10.365 TCP 23.104.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:11:58.251 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45490 10 6452 1 2025-08-23 05:12:09.823 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 05:12:09.881 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 05:12:15.802 00:00:10.362 TCP 23.104.0.1:35198 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:12:58.461 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43170 10 6452 1 2025-08-23 05:13:16.210 00:00:10.371 TCP 23.104.0.1:47068 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:13:58.684 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44424 10 6452 1 2025-08-23 05:14:16.620 00:00:10.364 TCP 23.104.0.1:36492 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:14:58.869 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49748 10 6452 1 2025-08-23 05:11:15.786 00:05:00.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 05:15:17.025 00:00:10.324 TCP 23.104.0.1:46138 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:15:59.091 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59244 10 6452 1 2025-08-23 05:12:15.783 00:05:00.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 05:16:17.391 00:00:10.323 TCP 23.104.0.1:52584 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:17:10.208 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 05:17:10.065 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 05:16:59.311 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41706 10 6452 1 2025-08-23 05:17:17.769 00:00:10.377 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:17:59.488 00:00:10.330 TCP 1.101.0.1:3000 -> 22.102.0.1:36322 10 6452 1 2025-08-23 05:18:18.189 00:00:10.368 TCP 23.104.0.1:40656 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:18:59.858 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33120 10 6452 1 2025-08-23 05:19:18.593 00:00:10.360 TCP 23.104.0.1:58740 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:20:00.084 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49152 10 6452 1 2025-08-23 05:20:18.990 00:00:10.358 TCP 23.104.0.1:46106 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:21:00.299 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48050 10 6452 1 2025-08-23 05:17:15.786 00:05:00.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 05:21:19.393 00:00:10.372 TCP 23.104.0.1:39480 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:22:10.306 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 05:22:10.308 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 05:22:00.471 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41816 10 6452 1 2025-08-23 05:18:15.783 00:05:00.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 05:22:19.807 00:00:10.369 TCP 23.104.0.1:35116 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:23:00.692 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51720 10 6452 1 2025-08-23 05:23:20.215 00:00:10.370 TCP 23.104.0.1:51398 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:24:00.908 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51854 10 6452 1 2025-08-23 05:24:20.619 00:00:10.369 TCP 23.104.0.1:50234 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:25:01.124 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34780 10 6452 1 2025-08-23 05:25:21.026 00:00:10.329 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:26:01.340 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6452 1 2025-08-23 05:26:21.394 00:00:10.363 TCP 23.104.0.1:41050 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:27:10.030 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 05:27:01.551 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52740 10 6452 1 2025-08-23 05:27:10.201 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 05:23:15.792 00:05:00.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 05:27:21.795 00:00:10.367 TCP 23.104.0.1:33952 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:28:01.759 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48042 10 6452 1 2025-08-23 05:24:15.788 00:05:00.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 05:28:22.200 00:00:10.361 TCP 23.104.0.1:40034 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:29:01.974 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52538 10 6452 1 2025-08-23 05:29:22.601 00:00:10.373 TCP 23.104.0.1:37490 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:30:02.205 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34116 10 6452 1 2025-08-23 05:30:23.018 00:00:10.362 TCP 23.104.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:31:02.421 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59424 10 6452 1 2025-08-23 05:31:23.418 00:00:10.417 TCP 23.104.0.1:55126 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:32:10.483 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 05:32:10.272 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 05:32:02.630 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40248 10 6452 1 2025-08-23 05:32:23.876 00:00:10.390 TCP 23.104.0.1:48298 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:29:15.792 00:05:00.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 05:33:02.843 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44470 10 6452 1 2025-08-23 05:33:24.305 00:00:10.322 TCP 23.104.0.1:38212 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:34:03.078 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60154 10 6452 1 2025-08-23 05:30:15.789 00:05:00.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 05:34:24.678 00:00:10.379 TCP 23.104.0.1:60648 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:35:03.291 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48110 10 6452 1 2025-08-23 05:35:25.146 00:00:10.369 TCP 23.104.0.1:48154 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:36:03.515 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33428 10 6452 1 2025-08-23 05:36:25.563 00:00:21.503 TCP 23.104.0.1:34380 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:37:11.605 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 05:37:11.400 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 05:37:03.734 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46258 10 6452 1 2025-08-23 05:37:37.150 00:00:10.369 TCP 23.104.0.1:54148 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:38:03.952 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39932 10 6452 1 2025-08-23 05:38:37.556 00:00:10.366 TCP 23.104.0.1:38824 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:39:04.173 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38946 10 6452 1 2025-08-23 05:35:15.795 00:05:00.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 05:39:37.957 00:00:10.366 TCP 23.104.0.1:34198 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:40:04.385 00:00:10.526 TCP 1.101.0.1:3000 -> 22.102.0.1:47128 10 6452 1 2025-08-23 05:36:15.795 00:05:00.527 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 05:40:38.363 00:00:10.370 TCP 23.104.0.1:44014 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:41:04.951 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40290 12 6556 1 2025-08-23 05:41:38.775 00:00:10.368 TCP 23.104.0.1:58868 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:42:10.436 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 05:42:10.479 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 05:42:05.180 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48882 10 6452 1 2025-08-23 05:42:39.182 00:00:10.364 TCP 23.104.0.1:45228 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:43:05.396 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53564 10 6452 1 2025-08-23 05:43:39.587 00:00:10.368 TCP 23.104.0.1:33166 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:44:05.574 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55442 10 6452 1 2025-08-23 05:44:39.999 00:00:10.583 TCP 23.104.0.1:45258 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:41:15.811 00:05:00.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 05:45:05.786 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54312 10 6452 1 2025-08-23 05:45:40.619 00:00:10.324 TCP 23.104.0.1:46938 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:46:06.000 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46158 10 6452 1 2025-08-23 05:42:15.798 00:05:00.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 05:46:40.983 00:00:10.367 TCP 23.104.0.1:40184 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:47:10.480 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 05:47:10.583 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 05:47:06.212 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51392 10 6452 1 2025-08-23 05:47:41.391 00:00:10.361 TCP 23.104.0.1:50660 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:48:06.431 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35052 10 6452 1 2025-08-23 05:48:41.790 00:00:10.365 TCP 23.104.0.1:48118 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:49:06.650 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35714 10 6452 1 2025-08-23 05:49:42.190 00:00:10.366 TCP 23.104.0.1:43372 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:50:06.868 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49972 10 6452 1 2025-08-23 05:50:42.594 00:00:10.323 TCP 23.104.0.1:51140 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:47:15.801 00:05:00.521 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 05:51:07.099 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45670 12 10367 1 2025-08-23 05:51:42.953 00:00:12.437 TCP 23.104.0.1:49416 -> 1.101.0.1:3000 15 1926 1 2025-08-23 05:52:10.722 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 05:52:10.851 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 05:48:15.799 00:05:00.526 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 05:52:07.339 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56414 10 6452 1 2025-08-23 05:52:45.433 00:00:10.361 TCP 23.104.0.1:54998 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:53:07.561 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55784 10 6452 1 2025-08-23 05:53:45.835 00:00:10.386 TCP 23.104.0.1:59822 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:54:07.779 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53854 10 6452 1 2025-08-23 05:54:46.258 00:00:10.327 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:55:07.993 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58948 10 6452 1 2025-08-23 05:55:46.623 00:00:10.368 TCP 23.104.0.1:44168 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:56:08.228 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:34252 12 10367 1 2025-08-23 05:56:47.029 00:00:10.436 TCP 23.104.0.1:36958 -> 1.101.0.1:3000 15 1926 1 2025-08-23 05:57:10.744 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 05:57:10.869 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 05:53:15.805 00:05:00.518 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 05:57:08.469 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53898 10 6452 1 2025-08-23 05:57:47.508 00:00:10.379 TCP 23.104.0.1:52166 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:54:15.802 00:05:00.523 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 05:58:08.687 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43256 10 6452 1 Summary: total flows: 163, total bytes: 514279, total packets: 1587, avg bps: 1136, avg pps: 0, avg bpp: 324 Time window: 2025-08-23 04:58:55 - 2025-08-23 05:59:16 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0009s Wall: 0.0023s flows/second: 72155.3 Runtime: 0.0023s