Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 13:59:05.804 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 12 10367 1 2025-08-09 13:59:18.765 00:00:10.397 TCP 23.104.0.1:47994 -> 1.101.0.1:3000 15 1926 1 2025-08-09 13:56:08.653 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 14:00:06.071 00:00:14.722 TCP 1.101.0.1:3000 -> 22.102.0.1:53454 10 6452 1 2025-08-09 14:00:36.309 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 14:00:19.207 00:00:10.374 TCP 23.104.0.1:44952 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:00:36.025 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:57:08.657 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 14:01:10.837 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41474 10 6452 1 2025-08-09 14:01:19.617 00:00:10.367 TCP 23.104.0.1:48002 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:02:11.079 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54802 10 6452 1 2025-08-09 14:02:20.021 00:00:10.364 TCP 23.104.0.1:46866 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:03:11.287 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40406 10 6452 1 2025-08-09 14:03:20.426 00:00:10.369 TCP 23.104.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:04:11.497 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36216 10 6452 1 2025-08-09 14:04:20.832 00:00:10.391 TCP 23.104.0.1:39294 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:05:11.708 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56494 10 6452 1 2025-08-09 14:05:21.260 00:00:10.370 TCP 23.104.0.1:40030 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:05:36.364 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 14:05:36.135 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 14:02:08.658 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 14:06:11.918 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54362 10 6452 1 2025-08-09 14:06:21.664 00:00:10.363 TCP 23.104.0.1:38386 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:03:08.661 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 14:07:12.127 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57772 10 6452 1 2025-08-09 14:07:22.087 00:00:10.324 TCP 23.104.0.1:40874 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:08:12.297 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54142 10 6452 1 2025-08-09 14:08:22.450 00:00:10.374 TCP 23.104.0.1:43582 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:09:12.519 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-08-09 14:09:22.860 00:00:10.378 TCP 23.104.0.1:55280 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:10:12.727 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43154 10 6452 1 2025-08-09 14:10:36.957 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 14:10:23.277 00:00:10.323 TCP 23.104.0.1:52170 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:10:36.975 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 14:11:12.968 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:36010 10 6452 1 2025-08-09 14:11:23.648 00:00:10.368 TCP 23.104.0.1:50488 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:08:08.658 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 14:12:13.148 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55564 10 6452 1 2025-08-09 14:12:24.065 00:00:10.368 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:09:08.666 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 14:13:13.363 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50554 10 6452 1 2025-08-09 14:13:24.473 00:00:10.337 TCP 23.104.0.1:42258 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:14:13.598 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37104 10 6452 1 2025-08-09 14:14:24.836 00:00:10.380 TCP 23.104.0.1:45510 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:15:13.813 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36548 10 6452 1 2025-08-09 14:15:36.625 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 14:15:25.254 00:00:10.365 TCP 23.104.0.1:35262 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:15:36.769 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 14:16:13.983 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:59710 10 6452 1 2025-08-09 14:16:25.660 00:00:10.327 TCP 23.104.0.1:56456 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:17:14.235 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35710 10 6452 1 2025-08-09 14:17:26.029 00:00:10.369 TCP 23.104.0.1:57650 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:14:08.663 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 14:18:14.455 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55314 10 6452 1 2025-08-09 14:18:26.443 00:00:10.322 TCP 23.104.0.1:43622 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:15:08.665 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 14:19:14.667 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36676 10 6452 1 2025-08-09 14:19:26.804 00:00:10.331 TCP 23.104.0.1:42692 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:20:14.879 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 10 6452 1 2025-08-09 14:20:36.771 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 14:20:36.818 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 14:20:27.172 00:00:10.363 TCP 23.104.0.1:60662 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:21:15.080 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44376 10 6452 1 2025-08-09 14:21:27.574 00:00:10.331 TCP 23.104.0.1:58416 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:22:15.295 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60684 10 6452 1 2025-08-09 14:22:27.947 00:00:10.324 TCP 23.104.0.1:49548 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:23:15.521 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41444 10 6452 1 2025-08-09 14:23:28.312 00:00:10.364 TCP 23.104.0.1:36740 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:20:08.664 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 14:24:15.694 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43658 10 6452 1 2025-08-09 14:24:28.712 00:00:10.337 TCP 23.104.0.1:33430 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:21:08.667 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 14:25:15.916 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40338 10 6452 1 2025-08-09 14:25:36.578 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 14:25:36.764 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 14:25:29.105 00:00:10.369 TCP 23.104.0.1:50012 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:26:16.137 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55496 10 6452 1 2025-08-09 14:26:29.522 00:00:10.362 TCP 23.104.0.1:33162 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:27:16.366 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41692 10 6452 1 2025-08-09 14:27:29.922 00:00:10.356 TCP 23.104.0.1:54062 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:28:16.581 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47774 10 6452 1 2025-08-09 14:28:30.325 00:00:10.365 TCP 23.104.0.1:49712 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:29:16.752 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54088 10 6452 1 2025-08-09 14:29:30.731 00:00:10.368 TCP 23.104.0.1:38564 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:26:08.668 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 14:30:16.964 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58776 10 6452 1 2025-08-09 14:30:36.836 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 14:30:37.096 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 14:30:31.146 00:00:10.363 TCP 23.104.0.1:36328 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:27:08.670 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 14:31:17.180 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34434 10 6452 1 2025-08-09 14:31:31.551 00:00:10.363 TCP 23.104.0.1:45378 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:32:17.361 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45048 10 6452 1 2025-08-09 14:32:31.955 00:00:10.366 TCP 23.104.0.1:53582 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:33:17.573 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:54792 10 6452 1 2025-08-09 14:33:32.357 00:00:10.367 TCP 23.104.0.1:40658 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:34:17.752 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44916 10 6452 1 2025-08-09 14:34:32.757 00:00:10.382 TCP 23.104.0.1:42126 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:35:17.980 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:43238 10 6452 1 2025-08-09 14:35:37.015 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 14:35:37.006 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 14:35:33.181 00:00:10.363 TCP 23.104.0.1:41614 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:32:08.669 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 14:36:18.218 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60844 10 6452 1 2025-08-09 14:36:33.585 00:00:10.365 TCP 23.104.0.1:47322 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:33:08.676 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 14:37:18.461 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60866 10 6452 1 2025-08-09 14:37:33.988 00:00:10.364 TCP 23.104.0.1:35030 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:38:18.675 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40246 10 6452 1 2025-08-09 14:38:34.393 00:00:10.336 TCP 23.104.0.1:45072 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:39:18.888 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52172 10 6452 1 2025-08-09 14:39:34.770 00:00:10.331 TCP 23.104.0.1:59802 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:40:19.107 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-08-09 14:40:37.285 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 14:40:37.402 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 14:40:35.149 00:00:10.367 TCP 23.104.0.1:51876 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:41:19.323 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52020 10 6452 1 2025-08-09 14:41:35.551 00:00:10.367 TCP 23.104.0.1:60318 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:38:08.685 00:05:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 14:42:19.498 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6452 1 2025-08-09 14:42:35.958 00:00:10.369 TCP 23.104.0.1:46900 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:39:08.687 00:05:00.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 14:43:19.712 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56300 10 6452 1 2025-08-09 14:43:36.367 00:00:10.436 TCP 23.104.0.1:55220 -> 1.101.0.1:3000 15 1926 1 2025-08-09 14:44:19.935 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34890 12 10365 1 2025-08-09 14:44:36.845 00:00:10.383 TCP 23.104.0.1:57908 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:45:20.163 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43882 10 6452 1 2025-08-09 14:45:37.174 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 14:45:37.030 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 14:45:37.265 00:00:10.361 TCP 23.104.0.1:47390 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:46:20.375 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58074 10 6452 1 2025-08-09 14:46:37.671 00:00:10.372 TCP 23.104.0.1:44256 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:47:20.544 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53774 10 6452 1 2025-08-09 14:47:38.107 00:00:10.329 TCP 23.104.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:44:08.687 00:05:00.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 14:48:20.764 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37658 10 6452 1 2025-08-09 14:48:38.481 00:00:10.362 TCP 23.104.0.1:54122 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:45:08.690 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 14:49:20.979 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:43832 10 6452 1 2025-08-09 14:49:38.878 00:00:10.391 TCP 23.104.0.1:57676 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:50:21.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41834 10 6452 1 2025-08-09 14:50:37.492 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 14:50:37.017 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 14:50:39.308 00:00:10.362 TCP 23.104.0.1:51948 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:51:21.429 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47986 10 6452 1 2025-08-09 14:51:39.709 00:00:10.321 TCP 23.104.0.1:60726 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:52:21.653 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45424 12 6556 1 2025-08-09 14:52:40.096 00:00:10.366 TCP 23.104.0.1:57358 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:53:21.877 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53734 10 6452 1 2025-08-09 14:53:40.502 00:00:10.377 TCP 23.104.0.1:57454 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:50:08.689 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 14:54:22.096 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34840 10 6452 1 2025-08-09 14:54:40.929 00:00:10.341 TCP 23.104.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:51:08.691 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 14:55:22.269 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44370 10 6452 1 2025-08-09 14:55:37.066 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 14:55:37.591 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 14:55:41.310 00:00:10.364 TCP 23.104.0.1:59272 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:56:22.479 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55362 10 6452 1 2025-08-09 14:56:41.714 00:00:10.384 TCP 23.104.0.1:38184 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:57:22.690 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55992 10 6452 1 2025-08-09 14:57:42.144 00:00:10.361 TCP 23.104.0.1:54790 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:58:22.901 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42384 10 6452 1 Summary: total flows: 163, total bytes: 505611, total packets: 1575, avg bps: 1080, avg pps: 0, avg bpp: 321 Time window: 2025-08-09 13:56:08 - 2025-08-09 14:58:33 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0017s Wall: 0.0023s flows/second: 70868.8 Runtime: 0.0023s