Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 04:58:48.599 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35570 10 6452 1 2025-09-03 04:58:58.400 00:00:10.373 TCP 23.104.0.1:37274 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:59:48.814 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37798 10 6452 1 2025-09-03 04:59:58.804 00:00:11.012 TCP 23.104.0.1:44382 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:00:49.031 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49002 10 6452 1 2025-09-03 05:00:59.858 00:00:10.374 TCP 23.104.0.1:43012 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:01:49.197 00:00:10.864 TCP 1.101.0.1:3000 -> 22.102.0.1:47668 10 6452 1 2025-09-03 05:02:00.268 00:00:10.365 TCP 23.104.0.1:55664 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:02:27.779 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 05:02:27.781 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 05:02:50.103 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34462 10 6452 1 2025-09-03 05:03:00.673 00:00:10.323 TCP 23.104.0.1:50552 -> 1.101.0.1:3000 11 1507 1 2025-09-03 04:59:22.735 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 05:03:50.314 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46040 10 6452 1 2025-09-03 05:04:01.032 00:00:10.363 TCP 23.104.0.1:44106 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:00:22.733 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 05:04:50.550 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47874 10 6452 1 2025-09-03 05:05:01.435 00:00:10.367 TCP 23.104.0.1:57092 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:05:50.764 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53174 10 6452 1 2025-09-03 05:06:01.841 00:00:10.349 TCP 23.104.0.1:35504 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:06:50.978 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49916 10 6452 1 2025-09-03 05:07:02.228 00:00:10.367 TCP 23.104.0.1:35050 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:07:27.849 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 05:07:28.011 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 05:07:51.207 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50800 10 6452 1 2025-09-03 05:08:02.641 00:00:10.370 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:08:51.427 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-09-03 05:09:03.063 00:00:10.367 TCP 23.104.0.1:58770 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:05:22.738 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 05:09:51.645 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59352 10 6452 1 2025-09-03 05:10:03.467 00:00:10.368 TCP 23.104.0.1:33022 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:06:22.737 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 05:10:51.869 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52344 10 6452 1 2025-09-03 05:11:03.873 00:00:10.367 TCP 23.104.0.1:36138 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:11:52.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54368 10 6452 1 2025-09-03 05:12:04.277 00:00:10.371 TCP 23.104.0.1:47192 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:12:28.057 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 05:12:28.126 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 05:12:52.297 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35798 10 6452 1 2025-09-03 05:13:04.700 00:00:10.385 TCP 23.104.0.1:43574 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:13:52.519 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55532 10 6452 1 2025-09-03 05:14:05.137 00:00:10.324 TCP 23.104.0.1:43360 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:14:52.731 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42486 10 6452 1 2025-09-03 05:15:05.498 00:00:10.372 TCP 23.104.0.1:49950 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:11:22.741 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 05:15:52.945 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57140 10 6452 1 2025-09-03 05:16:05.912 00:00:10.368 TCP 23.104.0.1:60286 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:12:22.738 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 05:16:53.181 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51008 10 6452 1 2025-09-03 05:17:06.316 00:00:10.368 TCP 23.104.0.1:38354 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:17:28.149 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 05:17:27.939 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 05:17:53.397 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33472 10 6452 1 2025-09-03 05:18:06.720 00:00:15.229 TCP 23.104.0.1:52524 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:18:53.613 00:00:10.829 TCP 1.101.0.1:3000 -> 22.102.0.1:49988 10 6452 1 2025-09-03 05:19:12.007 00:00:10.324 TCP 23.104.0.1:52466 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:19:54.483 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6452 1 2025-09-03 05:20:12.370 00:00:10.324 TCP 23.104.0.1:44436 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:20:54.700 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40572 10 6452 1 2025-09-03 05:17:22.741 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 05:21:12.732 00:00:10.364 TCP 23.104.0.1:52056 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:21:54.910 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57584 10 6452 1 2025-09-03 05:22:13.135 00:00:10.367 TCP 23.104.0.1:36972 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:18:22.739 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 05:22:27.966 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 05:22:28.099 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 05:22:55.124 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36630 10 6452 1 2025-09-03 05:23:13.538 00:00:10.369 TCP 23.104.0.1:48154 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:23:55.345 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44624 10 6452 1 2025-09-03 05:24:13.945 00:00:10.368 TCP 23.104.0.1:50410 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:24:55.556 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50536 10 6452 1 2025-09-03 05:25:14.352 00:00:10.363 TCP 23.104.0.1:46226 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:25:55.769 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56076 10 6452 1 2025-09-03 05:26:14.755 00:00:10.386 TCP 23.104.0.1:60446 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:26:55.988 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:58034 10 6452 1 2025-09-03 05:23:22.745 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 05:27:15.186 00:00:10.367 TCP 23.104.0.1:54208 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:27:28.282 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 05:27:28.393 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 05:27:56.193 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54206 10 6452 1 2025-09-03 05:28:15.585 00:00:10.365 TCP 23.104.0.1:53594 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:24:22.743 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 05:28:56.414 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55042 10 6452 1 2025-09-03 05:29:15.989 00:00:10.364 TCP 23.104.0.1:46800 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:29:56.639 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35516 10 6452 1 2025-09-03 05:30:16.397 00:00:10.323 TCP 23.104.0.1:58640 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:30:56.856 00:00:10.903 TCP 1.101.0.1:3000 -> 22.102.0.1:55884 10 6452 1 2025-09-03 05:31:16.761 00:00:10.371 TCP 23.104.0.1:47120 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:31:57.800 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44576 10 6452 1 2025-09-03 05:32:28.340 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 05:32:28.433 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 05:32:17.173 00:00:10.320 TCP 23.104.0.1:39284 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:32:58.021 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33504 10 6452 1 2025-09-03 05:29:22.751 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 05:33:17.537 00:00:10.369 TCP 23.104.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:33:58.230 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42080 10 6452 1 2025-09-03 05:30:22.748 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 05:34:17.943 00:00:10.379 TCP 23.104.0.1:50576 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:34:58.449 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40874 10 6452 1 2025-09-03 05:35:18.354 00:00:10.330 TCP 23.104.0.1:37178 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:35:58.661 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49488 10 6452 1 2025-09-03 05:36:18.721 00:00:10.381 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:36:58.873 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43298 10 6452 1 2025-09-03 05:37:28.549 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 05:37:19.138 00:00:10.328 TCP 23.104.0.1:33372 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:37:28.457 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 05:37:59.102 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:52452 10 6452 1 2025-09-03 05:38:19.507 00:00:10.324 TCP 23.104.0.1:39708 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:38:59.392 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37306 10 6452 1 2025-09-03 05:35:22.752 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 05:39:19.869 00:00:10.329 TCP 23.104.0.1:54026 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:39:59.609 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50422 10 6452 1 2025-09-03 05:36:22.749 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 05:40:20.232 00:00:10.368 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:40:59.823 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:34448 10 6452 1 2025-09-03 05:41:20.639 00:00:10.364 TCP 23.104.0.1:56790 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:41:59.992 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41476 10 6452 1 2025-09-03 05:42:28.383 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 05:42:28.169 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 05:42:21.043 00:00:10.321 TCP 23.104.0.1:43952 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:43:00.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51472 12 10367 1 2025-09-03 05:43:21.404 00:00:10.444 TCP 23.104.0.1:56074 -> 1.101.0.1:3000 15 1926 1 2025-09-03 05:44:00.424 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59882 10 6452 1 2025-09-03 05:44:21.890 00:00:10.387 TCP 23.104.0.1:35238 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:45:00.633 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40890 10 6452 1 2025-09-03 05:41:22.754 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 05:45:22.322 00:00:10.379 TCP 23.104.0.1:41518 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:46:00.849 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59218 10 6452 1 2025-09-03 05:42:22.752 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 05:46:22.738 00:00:10.331 TCP 23.104.0.1:34742 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:47:01.083 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38820 10 6452 1 2025-09-03 05:47:28.508 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 05:47:28.692 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 05:47:23.114 00:00:10.380 TCP 23.104.0.1:34526 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:48:01.292 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48694 10 6452 1 2025-09-03 05:48:23.559 00:00:10.472 TCP 23.104.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:49:01.499 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-09-03 05:49:24.108 00:00:10.365 TCP 23.104.0.1:54194 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:50:01.671 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49328 10 6452 1 2025-09-03 05:50:24.509 00:00:10.362 TCP 23.104.0.1:44648 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:51:01.840 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40710 10 6452 1 2025-09-03 05:47:22.755 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 05:51:24.914 00:00:10.373 TCP 23.104.0.1:43118 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:52:02.081 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55484 10 6452 1 2025-09-03 05:48:22.754 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 05:52:28.678 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 05:52:28.568 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 05:52:25.325 00:00:10.324 TCP 23.104.0.1:56894 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:53:02.301 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39700 10 6452 1 2025-09-03 05:53:25.684 00:00:10.369 TCP 23.104.0.1:55396 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:54:02.535 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42388 10 6452 1 2025-09-03 05:54:26.106 00:00:10.370 TCP 23.104.0.1:60820 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:55:02.759 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55886 10 6452 1 2025-09-03 05:55:26.514 00:00:10.327 TCP 23.104.0.1:38184 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:56:02.981 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:32942 10 6452 1 2025-09-03 05:56:26.881 00:00:10.329 TCP 23.104.0.1:51624 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:57:03.212 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48130 10 6452 1 2025-09-03 05:53:22.757 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 05:57:28.822 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 05:57:28.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 05:57:27.245 00:00:10.366 TCP 23.104.0.1:34774 -> 1.101.0.1:3000 11 1507 1 2025-09-03 05:58:03.384 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47382 10 6452 1 2025-09-03 05:54:22.755 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 05:58:27.647 00:00:10.365 TCP 23.104.0.1:40994 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1106, avg pps: 0, avg bpp: 318 Time window: 2025-09-03 04:58:48 - 2025-09-03 05:59:23 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0009s Wall: 0.0015s flows/second: 107546.3 Runtime: 0.0015s