Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 03:59:35.005 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53992 10 6452 1 2025-09-03 03:59:33.982 00:00:10.388 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:00:35.236 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34576 10 6452 1 2025-09-03 04:00:34.405 00:00:10.324 TCP 23.104.0.1:54384 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:01:34.768 00:00:10.372 TCP 23.104.0.1:55522 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:01:35.452 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59676 10 6452 1 2025-09-03 04:02:26.921 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 04:02:26.801 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 04:02:35.178 00:00:10.362 TCP 23.104.0.1:39404 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:02:35.670 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36226 10 6452 1 2025-09-03 03:59:22.715 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 04:03:35.883 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41174 10 6452 1 2025-09-03 04:03:35.577 00:00:10.321 TCP 23.104.0.1:42846 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:00:22.714 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 04:04:36.082 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:60274 10 6452 1 2025-09-03 04:04:35.937 00:00:10.411 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:05:36.386 00:00:10.358 TCP 23.104.0.1:34970 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:05:36.273 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58384 10 6452 1 2025-09-03 04:06:36.483 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42254 10 6452 1 2025-09-03 04:06:36.781 00:00:10.325 TCP 23.104.0.1:36744 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:07:26.677 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 04:07:26.636 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 04:07:36.692 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53378 10 6452 1 2025-09-03 04:07:37.145 00:00:10.362 TCP 23.104.0.1:56156 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:08:36.860 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36126 10 6452 1 2025-09-03 04:08:37.559 00:00:10.368 TCP 23.104.0.1:42214 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:05:22.718 00:05:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 04:09:37.094 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48202 10 6452 1 2025-09-03 04:09:37.966 00:00:10.383 TCP 23.104.0.1:52830 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:06:22.716 00:05:00.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 04:10:38.386 00:00:10.374 TCP 23.104.0.1:50246 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:10:37.269 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46954 10 6452 1 2025-09-03 04:11:38.796 00:00:10.406 TCP 23.104.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:11:37.441 00:00:10.285 TCP 1.101.0.1:3000 -> 22.102.0.1:34560 10 6452 1 2025-09-03 04:12:26.889 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 04:12:26.595 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 04:12:39.240 00:00:10.371 TCP 23.104.0.1:47722 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:12:37.770 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47340 10 6452 1 2025-09-03 04:13:39.682 00:00:10.370 TCP 23.104.0.1:52564 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:13:37.936 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51822 10 6452 1 2025-09-03 04:14:40.111 00:00:10.366 TCP 23.104.0.1:47756 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:14:38.179 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33456 10 6452 1 2025-09-03 04:11:22.719 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 04:15:40.522 00:00:10.705 TCP 23.104.0.1:46030 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:15:38.398 00:00:10.404 TCP 1.101.0.1:3000 -> 22.102.0.1:39914 10 6452 1 2025-09-03 04:12:22.717 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 04:16:38.842 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42050 10 6452 1 2025-09-03 04:16:41.266 00:00:10.363 TCP 23.104.0.1:35736 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:17:26.799 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 04:17:26.727 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 04:17:41.670 00:00:10.321 TCP 23.104.0.1:54634 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:17:39.082 00:00:10.836 TCP 1.101.0.1:3000 -> 22.102.0.1:59124 10 6452 1 2025-09-03 04:18:39.959 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53236 12 6556 1 2025-09-03 04:18:42.036 00:00:10.366 TCP 23.104.0.1:43914 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:19:40.194 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54478 10 6452 1 2025-09-03 04:19:42.440 00:00:10.364 TCP 23.104.0.1:46188 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:20:40.413 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45686 10 6452 1 2025-09-03 04:20:42.846 00:00:10.389 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:17:22.721 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 04:21:40.627 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50672 10 6452 1 2025-09-03 04:21:43.273 00:00:10.327 TCP 23.104.0.1:44694 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:22:26.945 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 04:18:22.719 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 04:22:27.156 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 04:22:40.839 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51694 10 6452 1 2025-09-03 04:22:43.634 00:00:10.366 TCP 23.104.0.1:40210 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:23:41.077 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49296 10 6452 1 2025-09-03 04:23:44.052 00:00:10.371 TCP 23.104.0.1:33564 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:24:41.287 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58140 10 6452 1 2025-09-03 04:24:44.462 00:00:10.364 TCP 23.104.0.1:52122 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:25:41.500 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:45916 10 6452 1 2025-09-03 04:25:44.863 00:00:10.364 TCP 23.104.0.1:47438 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:26:41.668 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44368 10 6452 1 2025-09-03 04:26:45.264 00:00:10.369 TCP 23.104.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:27:26.924 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 04:23:22.723 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 04:27:27.094 00:00:00.049 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 04:27:45.670 00:00:10.477 TCP 23.104.0.1:52462 -> 1.101.0.1:3000 16 1978 1 2025-09-03 04:27:41.889 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59704 10 6452 1 2025-09-03 04:24:22.720 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 04:28:42.115 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:40230 12 10367 1 2025-09-03 04:28:46.183 00:00:10.371 TCP 23.104.0.1:56390 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:29:46.589 00:00:10.367 TCP 23.104.0.1:43632 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:29:42.368 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38202 10 6452 1 2025-09-03 04:30:42.573 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34614 10 6452 1 2025-09-03 04:30:46.995 00:00:10.366 TCP 23.104.0.1:57840 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:31:42.783 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44098 10 6452 1 2025-09-03 04:31:47.401 00:00:10.580 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:32:27.071 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 04:32:27.118 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 04:32:43.004 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36704 10 6452 1 2025-09-03 04:32:48.023 00:00:10.364 TCP 23.104.0.1:33622 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:29:22.723 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 04:33:43.235 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44144 10 6452 1 2025-09-03 04:33:48.421 00:00:10.331 TCP 23.104.0.1:46608 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:30:22.721 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 04:34:43.441 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33588 10 6452 1 2025-09-03 04:34:48.794 00:00:10.369 TCP 23.104.0.1:49214 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:35:43.655 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36624 10 6452 1 2025-09-03 04:35:49.204 00:00:10.323 TCP 23.104.0.1:44540 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:36:43.843 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:59092 10 6452 1 2025-09-03 04:36:49.566 00:00:10.371 TCP 23.104.0.1:50832 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:37:27.284 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 04:37:27.223 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 04:37:44.099 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:53510 10 6452 1 2025-09-03 04:37:49.976 00:00:10.356 TCP 23.104.0.1:44586 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:38:44.286 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48646 10 6452 1 2025-09-03 04:38:50.371 00:00:10.359 TCP 23.104.0.1:58562 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:35:22.725 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 04:39:44.506 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33612 10 6452 1 2025-09-03 04:39:50.770 00:00:10.374 TCP 23.104.0.1:53274 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:36:22.722 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 04:40:44.725 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35726 10 6452 1 2025-09-03 04:40:51.181 00:00:10.364 TCP 23.104.0.1:55632 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:41:44.939 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:43894 10 6452 1 2025-09-03 04:41:51.586 00:00:10.419 TCP 23.104.0.1:36228 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:42:27.387 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 04:42:27.607 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 04:42:45.144 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39626 10 6452 1 2025-09-03 04:42:52.045 00:00:10.363 TCP 23.104.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:43:45.360 00:00:10.393 TCP 1.101.0.1:3000 -> 22.102.0.1:59614 10 6452 1 2025-09-03 04:43:52.467 00:00:10.329 TCP 23.104.0.1:36616 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:44:45.791 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52910 10 6452 1 2025-09-03 04:44:52.834 00:00:10.389 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:41:22.726 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 04:45:46.008 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34356 10 6452 1 2025-09-03 04:45:53.265 00:00:10.363 TCP 23.104.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:42:22.727 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 04:46:46.180 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52148 10 6452 1 2025-09-03 04:46:53.669 00:00:10.395 TCP 23.104.0.1:57566 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:47:27.585 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 04:47:27.674 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 04:47:46.361 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51096 10 6452 1 2025-09-03 04:47:54.108 00:00:10.331 TCP 23.104.0.1:35208 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:48:46.534 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46700 10 6452 1 2025-09-03 04:48:54.481 00:00:10.329 TCP 23.104.0.1:40500 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:49:46.707 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53324 10 6452 1 2025-09-03 04:49:54.859 00:00:10.378 TCP 23.104.0.1:44890 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:50:46.917 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37564 10 6452 1 2025-09-03 04:50:55.281 00:00:10.373 TCP 23.104.0.1:59342 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:47:22.731 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 04:51:47.128 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48910 10 6452 1 2025-09-03 04:51:55.694 00:00:10.335 TCP 23.104.0.1:54148 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:48:22.729 00:05:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 04:52:27.414 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 04:52:27.494 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 04:52:47.343 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39026 10 6452 1 2025-09-03 04:52:56.095 00:00:10.321 TCP 23.104.0.1:34590 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:53:47.551 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45806 10 6452 1 2025-09-03 04:53:56.456 00:00:10.361 TCP 23.104.0.1:39766 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:54:47.763 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58024 10 6452 1 2025-09-03 04:54:56.863 00:00:10.367 TCP 23.104.0.1:41872 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:55:47.978 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:37472 10 6452 1 2025-09-03 04:55:57.265 00:00:10.322 TCP 23.104.0.1:59792 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:56:48.212 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37568 10 6452 1 2025-09-03 04:56:57.631 00:00:10.327 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:53:22.734 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 04:57:27.338 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 04:57:27.673 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 04:57:48.380 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36372 10 6452 1 2025-09-03 04:57:57.993 00:00:10.370 TCP 23.104.0.1:51128 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:54:22.732 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 494879, total packets: 1560, avg bps: 1099, avg pps: 0, avg bpp: 317 Time window: 2025-09-03 03:59:22 - 2025-09-03 04:59:23 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0038s User: 0.0009s Wall: 0.0022s flows/second: 73568.3 Runtime: 0.0022s