Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 12:58:52.964 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:33670 10 6452 1 2025-08-09 12:58:54.535 00:00:10.365 TCP 23.104.0.1:50840 -> 1.101.0.1:3000 11 1507 1 2025-08-09 12:59:53.152 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42668 10 6452 1 2025-08-09 12:59:54.935 00:00:10.366 TCP 23.104.0.1:57340 -> 1.101.0.1:3000 11 1507 1 2025-08-09 12:56:08.630 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 13:00:34.830 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 13:00:34.986 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:00:53.372 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38658 10 6452 1 2025-08-09 13:00:55.344 00:00:10.326 TCP 23.104.0.1:59602 -> 1.101.0.1:3000 11 1507 1 2025-08-09 12:57:08.634 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 13:01:53.545 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37782 10 6452 1 2025-08-09 13:01:55.710 00:00:10.363 TCP 23.104.0.1:42864 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:02:56.110 00:00:10.377 TCP 23.104.0.1:56648 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:02:53.753 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46646 10 6452 1 2025-08-09 13:03:53.929 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:54206 10 6452 1 2025-08-09 13:03:56.528 00:00:10.326 TCP 23.104.0.1:44920 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:04:54.125 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52084 10 6452 1 2025-08-09 13:04:56.897 00:00:10.375 TCP 23.104.0.1:57176 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:05:34.922 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:05:35.025 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 13:05:54.339 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46740 10 6452 1 2025-08-09 13:05:57.311 00:00:10.361 TCP 23.104.0.1:52452 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:02:08.635 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 13:06:54.554 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44706 10 6452 1 2025-08-09 13:03:08.638 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 13:06:57.711 00:00:10.372 TCP 23.104.0.1:60078 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:07:54.765 00:00:10.581 TCP 1.101.0.1:3000 -> 22.102.0.1:55356 10 6452 1 2025-08-09 13:07:58.116 00:00:10.361 TCP 23.104.0.1:42944 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:08:55.385 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51922 10 6452 1 2025-08-09 13:08:58.519 00:00:10.365 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:09:55.597 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46244 10 6452 1 2025-08-09 13:09:58.927 00:00:10.345 TCP 23.104.0.1:60436 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:10:35.275 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 13:10:35.266 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:10:55.769 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35246 10 6452 1 2025-08-09 13:10:59.309 00:00:10.362 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:11:55.996 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48058 10 6452 1 2025-08-09 13:08:08.638 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 13:11:59.714 00:00:10.322 TCP 23.104.0.1:36622 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:12:56.175 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52064 10 6452 1 2025-08-09 13:13:00.102 00:00:10.364 TCP 23.104.0.1:34796 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:09:08.641 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 13:13:56.355 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 12 10367 1 2025-08-09 13:14:00.509 00:00:10.440 TCP 23.104.0.1:43768 -> 1.101.0.1:3000 15 1926 1 2025-08-09 13:14:56.607 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57328 10 6452 1 2025-08-09 13:15:00.992 00:00:10.367 TCP 23.104.0.1:42224 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:15:35.321 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:15:35.175 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 13:15:56.777 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33730 10 6452 1 2025-08-09 13:16:01.399 00:00:10.367 TCP 23.104.0.1:54876 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:16:56.993 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:36784 10 6452 1 2025-08-09 13:17:01.804 00:00:10.340 TCP 23.104.0.1:46806 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:17:57.179 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37940 10 6452 1 2025-08-09 13:14:08.639 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 13:18:02.181 00:00:10.362 TCP 23.104.0.1:54480 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:15:08.641 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 13:18:57.391 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34552 10 6452 1 2025-08-09 13:19:02.587 00:00:10.324 TCP 23.104.0.1:56266 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:19:57.602 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60068 10 6452 1 2025-08-09 13:20:02.959 00:00:10.318 TCP 23.104.0.1:38108 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:20:35.588 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:20:35.377 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 13:20:57.822 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54912 10 6452 1 2025-08-09 13:21:03.320 00:00:10.317 TCP 23.104.0.1:52150 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:21:58.004 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46612 10 6452 1 2025-08-09 13:22:03.678 00:00:10.322 TCP 23.104.0.1:59840 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:22:58.227 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39464 10 6452 1 2025-08-09 13:23:04.052 00:00:10.366 TCP 23.104.0.1:46884 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:20:08.640 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 13:23:58.442 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52094 10 6452 1 2025-08-09 13:24:04.455 00:00:10.362 TCP 23.104.0.1:45834 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:21:08.641 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 13:24:58.652 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56434 10 6452 1 2025-08-09 13:25:04.854 00:00:10.331 TCP 23.104.0.1:43924 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:25:35.340 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 13:25:35.580 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:25:58.861 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55050 10 6452 1 2025-08-09 13:26:05.224 00:00:10.366 TCP 23.104.0.1:54186 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:26:59.084 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56242 10 6452 1 2025-08-09 13:27:05.633 00:00:10.333 TCP 23.104.0.1:50818 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:27:59.299 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6452 1 2025-08-09 13:28:06.005 00:00:10.362 TCP 23.104.0.1:53312 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:28:59.517 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54944 10 6452 1 2025-08-09 13:29:06.404 00:00:10.336 TCP 23.104.0.1:49836 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:29:59.735 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45742 10 6452 1 2025-08-09 13:26:08.642 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 13:30:06.781 00:00:10.368 TCP 23.104.0.1:60662 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:30:35.483 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:30:35.600 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 13:27:08.645 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 13:30:59.913 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56050 10 6452 1 2025-08-09 13:31:07.186 00:00:10.362 TCP 23.104.0.1:39910 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:32:00.124 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45898 10 6452 1 2025-08-09 13:32:07.590 00:00:10.360 TCP 23.104.0.1:34992 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:33:00.296 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40002 10 6452 1 2025-08-09 13:33:07.991 00:00:10.329 TCP 23.104.0.1:57164 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:34:00.509 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54132 10 6452 1 2025-08-09 13:34:08.360 00:00:10.361 TCP 23.104.0.1:56182 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:35:00.719 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42834 10 6452 1 2025-08-09 13:35:08.754 00:00:10.339 TCP 23.104.0.1:32836 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:35:35.585 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 13:35:35.624 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:36:00.933 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:54646 10 6452 1 2025-08-09 13:32:08.643 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 13:36:09.133 00:00:10.329 TCP 23.104.0.1:32860 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:33:08.646 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 13:37:01.138 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49932 10 6452 1 2025-08-09 13:37:09.499 00:00:10.369 TCP 23.104.0.1:40778 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:38:01.349 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53808 10 6452 1 2025-08-09 13:38:09.905 00:00:10.370 TCP 23.104.0.1:60802 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:39:01.564 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:41660 12 10365 1 2025-08-09 13:39:10.315 00:00:10.443 TCP 23.104.0.1:44686 -> 1.101.0.1:3000 15 1926 1 2025-08-09 13:40:01.755 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56484 10 6452 1 2025-08-09 13:40:10.797 00:00:10.372 TCP 23.104.0.1:36458 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:40:35.845 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:40:35.649 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 13:41:01.968 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41848 10 6452 1 2025-08-09 13:41:11.205 00:00:10.367 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:38:08.644 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 13:42:02.202 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45140 10 6452 1 2025-08-09 13:42:11.611 00:00:10.323 TCP 23.104.0.1:48334 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:39:08.647 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 13:43:02.377 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50528 10 6452 1 2025-08-09 13:43:11.973 00:00:10.326 TCP 23.104.0.1:34518 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:44:02.592 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52212 10 6452 1 2025-08-09 13:44:12.333 00:00:10.364 TCP 23.104.0.1:57378 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:45:02.811 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57212 10 6452 1 2025-08-09 13:45:12.737 00:00:10.361 TCP 23.104.0.1:39236 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:45:35.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:45:35.967 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 13:46:02.977 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:49898 13 6608 1 2025-08-09 13:46:13.135 00:00:10.370 TCP 23.104.0.1:59288 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:47:03.232 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34182 10 6452 1 2025-08-09 13:47:13.540 00:00:10.329 TCP 23.104.0.1:51356 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:44:08.651 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 13:48:03.463 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43682 10 6452 1 2025-08-09 13:48:13.908 00:00:10.324 TCP 23.104.0.1:42022 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:45:08.653 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 13:49:03.672 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46470 10 6452 1 2025-08-09 13:49:14.271 00:00:10.321 TCP 23.104.0.1:48446 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:50:03.890 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35740 10 6452 1 2025-08-09 13:50:14.633 00:00:10.370 TCP 23.104.0.1:44116 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:50:35.902 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 13:50:35.836 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:51:04.112 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47982 10 6452 1 2025-08-09 13:51:15.046 00:00:10.331 TCP 23.104.0.1:43390 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:52:04.321 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39278 10 6452 1 2025-08-09 13:52:15.422 00:00:10.369 TCP 23.104.0.1:55818 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:53:04.491 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43238 10 6452 1 2025-08-09 13:53:15.830 00:00:10.381 TCP 23.104.0.1:42832 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:50:08.651 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 13:54:04.659 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52874 10 6452 1 2025-08-09 13:54:16.258 00:00:10.326 TCP 23.104.0.1:45416 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:51:08.654 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 13:55:04.874 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 11 6504 1 2025-08-09 13:55:16.621 00:00:10.320 TCP 23.104.0.1:49446 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:55:36.047 00:00:00.049 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 13:55:36.018 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:56:05.151 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44206 10 6452 1 2025-08-09 13:56:16.983 00:00:10.371 TCP 23.104.0.1:42188 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:57:05.368 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36028 10 6452 1 2025-08-09 13:57:17.401 00:00:10.364 TCP 23.104.0.1:56770 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:58:05.585 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59364 10 6452 1 2025-08-09 13:58:17.807 00:00:10.916 TCP 23.104.0.1:52760 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507222, total packets: 1588, avg bps: 1084, avg pps: 0, avg bpp: 319 Time window: 2025-08-09 12:56:08 - 2025-08-09 13:58:28 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0022s User: 0.0022s Wall: 0.0026s flows/second: 62595.9 Runtime: 0.0026s