Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 17:59:31.408 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38320 10 6452 1 2025-08-13 17:59:40.132 00:00:10.366 TCP 23.104.0.1:34034 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:56:10.791 00:05:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 18:00:31.643 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-08-13 18:00:40.537 00:00:10.321 TCP 23.104.0.1:41324 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:57:10.794 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 18:01:31.875 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:47044 11 6504 1 2025-08-13 18:01:40.913 00:00:10.364 TCP 23.104.0.1:56272 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:02:36.725 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 18:02:36.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 18:02:32.164 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54542 10 6452 1 2025-08-13 18:02:41.319 00:00:10.360 TCP 23.104.0.1:41106 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:03:32.390 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-08-13 18:03:41.721 00:00:10.366 TCP 23.104.0.1:60270 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:04:32.592 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36580 10 6452 1 2025-08-13 18:04:42.125 00:00:10.363 TCP 23.104.0.1:49380 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:05:32.805 00:00:13.066 TCP 1.101.0.1:3000 -> 22.102.0.1:52414 10 6452 1 2025-08-13 18:05:42.528 00:00:10.365 TCP 23.104.0.1:51634 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:02:10.790 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 18:06:35.911 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40968 10 6452 1 2025-08-13 18:06:42.930 00:00:10.391 TCP 23.104.0.1:45992 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:03:10.794 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 18:07:36.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 18:07:36.722 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 18:07:36.129 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39706 10 6452 1 2025-08-13 18:07:43.371 00:00:10.365 TCP 23.104.0.1:33648 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:08:36.343 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55044 10 6452 1 2025-08-13 18:08:43.775 00:00:10.372 TCP 23.104.0.1:50256 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:09:36.565 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58958 10 6452 1 2025-08-13 18:09:44.193 00:00:10.372 TCP 23.104.0.1:51630 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:10:36.782 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35516 10 6452 1 2025-08-13 18:10:44.608 00:00:10.325 TCP 23.104.0.1:43968 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:11:37.006 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44592 10 6452 1 2025-08-13 18:11:44.971 00:00:10.380 TCP 23.104.0.1:36658 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:08:10.794 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 18:12:36.871 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 18:12:36.932 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 18:12:37.183 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60464 10 6452 1 2025-08-13 18:12:45.387 00:00:10.322 TCP 23.104.0.1:47750 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:09:10.796 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 18:13:37.402 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47314 10 6452 1 2025-08-13 18:13:45.747 00:00:10.366 TCP 23.104.0.1:41548 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:14:37.625 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59944 10 6452 1 2025-08-13 18:14:46.151 00:00:10.363 TCP 23.104.0.1:41252 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:15:37.845 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:47940 12 10367 1 2025-08-13 18:15:46.554 00:00:10.441 TCP 23.104.0.1:53740 -> 1.101.0.1:3000 15 1926 1 2025-08-13 18:16:38.096 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56804 10 6452 1 2025-08-13 18:16:47.033 00:00:10.777 TCP 23.104.0.1:36304 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:17:36.598 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 18:17:37.003 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 18:17:38.314 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54898 10 6452 1 2025-08-13 18:17:47.859 00:00:10.372 TCP 23.104.0.1:59240 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:14:10.795 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 18:18:38.488 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39014 10 6452 1 2025-08-13 18:18:48.268 00:00:10.369 TCP 23.104.0.1:57334 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:15:10.798 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 18:19:38.714 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45552 10 6452 1 2025-08-13 18:19:48.681 00:00:10.322 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:20:38.932 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51566 10 6452 1 2025-08-13 18:20:49.064 00:00:10.364 TCP 23.104.0.1:36212 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:21:39.167 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51322 10 6452 1 2025-08-13 18:21:49.466 00:00:10.364 TCP 23.104.0.1:34576 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:22:36.950 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 18:22:37.181 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 18:22:39.335 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32918 10 6452 1 2025-08-13 18:22:49.871 00:00:10.367 TCP 23.104.0.1:41118 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:23:39.543 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44102 10 6452 1 2025-08-13 18:23:50.273 00:00:10.360 TCP 23.104.0.1:39806 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:20:10.801 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 18:24:39.722 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52838 10 6452 1 2025-08-13 18:24:50.673 00:00:10.325 TCP 23.104.0.1:44096 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:21:10.804 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 18:25:39.939 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58962 10 6452 1 2025-08-13 18:25:51.064 00:00:10.366 TCP 23.104.0.1:35216 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:26:40.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47078 10 6452 1 2025-08-13 18:26:51.472 00:00:10.364 TCP 23.104.0.1:56056 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:27:37.144 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 18:27:36.985 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 18:27:40.393 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53502 10 6452 1 2025-08-13 18:27:51.873 00:00:10.365 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:28:40.607 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52366 10 6452 1 2025-08-13 18:28:52.274 00:00:10.363 TCP 23.104.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:29:40.817 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:35406 10 6452 1 2025-08-13 18:29:52.677 00:00:10.373 TCP 23.104.0.1:50210 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:26:10.802 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 18:30:41.003 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45640 10 6452 1 2025-08-13 18:30:53.111 00:00:10.324 TCP 23.104.0.1:46298 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:27:10.805 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 18:31:41.226 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42350 10 6452 1 2025-08-13 18:31:53.476 00:00:10.367 TCP 23.104.0.1:41906 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:32:37.147 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 18:32:36.985 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 18:32:41.439 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47268 10 6452 1 2025-08-13 18:32:53.882 00:00:10.377 TCP 23.104.0.1:50868 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:33:41.655 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35980 10 6452 1 2025-08-13 18:33:54.298 00:00:10.369 TCP 23.104.0.1:47814 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:34:41.871 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38490 10 6452 1 2025-08-13 18:34:54.702 00:00:10.371 TCP 23.104.0.1:40390 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:35:42.094 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59762 10 6452 1 2025-08-13 18:35:55.113 00:00:10.322 TCP 23.104.0.1:42216 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:32:10.804 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 18:36:42.304 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54578 10 6452 1 2025-08-13 18:36:55.472 00:00:10.366 TCP 23.104.0.1:42020 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:33:10.814 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 18:37:37.261 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 18:37:37.206 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 18:37:42.518 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47026 10 6452 1 2025-08-13 18:37:55.886 00:00:10.392 TCP 23.104.0.1:60438 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:38:42.730 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38704 10 6452 1 2025-08-13 18:38:56.311 00:00:10.328 TCP 23.104.0.1:53470 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:39:42.904 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46256 10 6452 1 2025-08-13 18:39:56.675 00:00:10.367 TCP 23.104.0.1:59696 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:40:43.128 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44582 10 6452 1 2025-08-13 18:40:57.106 00:00:10.322 TCP 23.104.0.1:43394 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:41:43.347 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53330 10 6452 1 2025-08-13 18:41:57.467 00:00:10.367 TCP 23.104.0.1:59896 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:38:10.813 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 18:42:37.372 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 18:42:37.419 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 18:42:43.568 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58460 10 6452 1 2025-08-13 18:42:57.890 00:00:10.381 TCP 23.104.0.1:44700 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:39:10.816 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 18:43:43.788 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46870 10 6452 1 2025-08-13 18:43:58.310 00:00:10.375 TCP 23.104.0.1:59736 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:44:44.009 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46854 10 6452 1 2025-08-13 18:44:58.730 00:00:10.333 TCP 23.104.0.1:54572 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:45:44.231 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:53230 10 6452 1 2025-08-13 18:45:59.113 00:00:10.367 TCP 23.104.0.1:42692 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:46:44.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47486 10 6452 1 2025-08-13 18:46:59.516 00:00:10.327 TCP 23.104.0.1:45192 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:47:37.285 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 18:47:37.275 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 18:47:44.651 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44964 10 6452 1 2025-08-13 18:47:59.875 00:00:10.364 TCP 23.104.0.1:38528 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:44:10.813 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 18:48:44.818 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39040 10 6452 1 2025-08-13 18:49:00.279 00:00:10.324 TCP 23.104.0.1:55774 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:45:10.817 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 18:49:44.993 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42522 10 6452 1 2025-08-13 18:50:00.643 00:00:10.371 TCP 23.104.0.1:35186 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:50:45.235 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57990 12 10367 1 2025-08-13 18:51:01.061 00:00:10.441 TCP 23.104.0.1:48108 -> 1.101.0.1:3000 15 1926 1 2025-08-13 18:51:45.448 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:56592 10 6452 1 2025-08-13 18:52:01.536 00:00:10.364 TCP 23.104.0.1:52484 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:52:37.416 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 18:52:37.489 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 18:52:45.615 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43786 10 6452 1 2025-08-13 18:53:01.937 00:00:10.395 TCP 23.104.0.1:38090 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:53:45.836 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40344 10 6452 1 2025-08-13 18:50:10.815 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 18:54:02.369 00:00:10.359 TCP 23.104.0.1:57582 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:54:46.083 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35340 10 6452 1 2025-08-13 18:51:10.817 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 18:55:02.769 00:00:10.333 TCP 23.104.0.1:55628 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:55:46.305 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51866 10 6452 1 2025-08-13 18:56:03.141 00:00:10.367 TCP 23.104.0.1:55050 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:56:46.526 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41690 10 6452 1 2025-08-13 18:57:03.549 00:00:10.364 TCP 23.104.0.1:41210 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:57:37.722 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 18:57:37.297 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 18:57:46.742 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55850 10 6452 1 2025-08-13 18:58:03.953 00:00:10.364 TCP 23.104.0.1:37546 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499109, total packets: 1564, avg bps: 1072, avg pps: 0, avg bpp: 319 Time window: 2025-08-13 17:56:10 - 2025-08-13 18:58:14 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0031s User: 0.0016s Wall: 0.0023s flows/second: 71523.9 Runtime: 0.0023s