Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 11:58:59.934 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:59628 10 6452 1 2025-09-10 11:59:10.568 00:00:10.324 TCP 23.104.0.1:50470 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:00:00.171 00:00:11.405 TCP 1.101.0.1:3000 -> 22.102.0.1:48884 10 6452 1 2025-09-10 12:00:10.933 00:00:10.381 TCP 23.104.0.1:56692 -> 1.101.0.1:3000 11 1507 1 2025-09-10 11:56:26.347 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 12:01:05.656 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 12:01:05.715 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 12:01:01.620 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43756 10 6452 1 2025-09-10 12:01:11.351 00:00:10.366 TCP 23.104.0.1:59780 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:02:01.837 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47000 10 6452 1 2025-09-10 12:02:11.755 00:00:10.391 TCP 23.104.0.1:43630 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:03:02.076 00:00:10.600 TCP 1.101.0.1:3000 -> 22.102.0.1:58520 10 6452 1 2025-09-10 12:03:12.186 00:00:10.387 TCP 23.104.0.1:33970 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:04:02.714 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39132 10 6452 1 2025-09-10 12:04:12.613 00:00:10.368 TCP 23.104.0.1:56012 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:00:26.350 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 12:05:02.888 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:41380 10 6452 1 2025-09-10 12:05:13.021 00:00:10.359 TCP 23.104.0.1:50616 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:06:05.594 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 12:06:05.645 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 12:06:03.086 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60314 10 6452 1 2025-09-10 12:06:13.420 00:00:10.374 TCP 23.104.0.1:33898 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:02:26.349 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 12:07:03.268 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:54150 10 6452 1 2025-09-10 12:07:13.833 00:00:10.346 TCP 23.104.0.1:33512 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:08:03.456 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46662 10 6452 1 2025-09-10 12:08:14.223 00:00:10.365 TCP 23.104.0.1:46234 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:09:03.667 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37742 10 6452 1 2025-09-10 12:09:14.625 00:00:10.328 TCP 23.104.0.1:45144 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:10:03.844 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39864 10 6452 1 2025-09-10 12:10:14.991 00:00:10.365 TCP 23.104.0.1:43138 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:06:26.352 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 12:11:06.066 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 12:11:05.903 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 12:11:04.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59004 10 6452 1 2025-09-10 12:11:15.397 00:00:10.360 TCP 23.104.0.1:51182 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:12:04.297 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:40376 10 6452 1 2025-09-10 12:12:15.799 00:00:10.935 TCP 23.104.0.1:33758 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:08:26.350 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 12:13:04.480 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 10 6452 1 2025-09-10 12:13:16.772 00:00:10.369 TCP 23.104.0.1:39054 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:14:04.694 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44168 10 6452 1 2025-09-10 12:14:17.181 00:00:10.365 TCP 23.104.0.1:36590 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:15:04.910 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58878 10 6452 1 2025-09-10 12:15:17.586 00:00:10.368 TCP 23.104.0.1:59210 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:16:05.926 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 12:16:05.943 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 12:16:05.087 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55018 10 6452 1 2025-09-10 12:16:18.002 00:00:10.365 TCP 23.104.0.1:33778 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:12:26.353 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 12:17:05.303 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50896 10 6452 1 2025-09-10 12:17:18.403 00:00:10.365 TCP 23.104.0.1:56236 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:18:05.515 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33718 10 6452 1 2025-09-10 12:18:18.806 00:00:10.362 TCP 23.104.0.1:55848 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:14:26.352 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 12:19:05.690 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46354 10 6452 1 2025-09-10 12:19:19.207 00:00:10.368 TCP 23.104.0.1:57632 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:20:05.912 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:54328 10 6452 1 2025-09-10 12:20:19.609 00:00:10.366 TCP 23.104.0.1:55418 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:21:06.299 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 12:21:06.254 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 12:21:06.111 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:55142 10 6452 1 2025-09-10 12:21:20.015 00:00:10.362 TCP 23.104.0.1:36388 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:22:06.279 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40096 10 6452 1 2025-09-10 12:18:26.353 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 12:22:20.422 00:00:10.364 TCP 23.104.0.1:38800 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:23:06.468 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35244 10 6452 1 2025-09-10 12:23:20.827 00:00:10.466 TCP 23.104.0.1:43670 -> 1.101.0.1:3000 15 1926 1 2025-09-10 12:24:06.683 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:35852 12 10365 1 2025-09-10 12:24:21.335 00:00:10.321 TCP 23.104.0.1:55236 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:20:26.353 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 12:25:06.891 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37176 10 6452 1 2025-09-10 12:25:21.690 00:00:10.788 TCP 23.104.0.1:58736 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:26:06.050 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 12:26:06.146 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 12:26:07.113 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48216 10 6452 1 2025-09-10 12:26:22.522 00:00:10.364 TCP 23.104.0.1:37690 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:27:07.325 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36582 10 6452 1 2025-09-10 12:27:22.926 00:00:10.391 TCP 23.104.0.1:40358 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:28:07.536 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38008 10 6452 1 2025-09-10 12:24:26.356 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 12:28:23.357 00:00:10.321 TCP 23.104.0.1:39092 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:29:07.757 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33254 10 6452 1 2025-09-10 12:29:23.720 00:00:10.378 TCP 23.104.0.1:58034 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:30:07.926 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56456 10 6452 1 2025-09-10 12:26:26.354 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 12:30:24.153 00:00:10.366 TCP 23.104.0.1:50512 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:31:06.232 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 12:31:06.205 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 12:31:08.155 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36318 10 6452 1 2025-09-10 12:31:24.557 00:00:10.326 TCP 23.104.0.1:51974 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:32:08.328 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53250 10 6452 1 2025-09-10 12:32:24.921 00:00:10.387 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:33:08.541 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38406 10 6452 1 2025-09-10 12:33:25.345 00:00:10.322 TCP 23.104.0.1:42732 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:34:08.713 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57258 10 6452 1 2025-09-10 12:30:26.356 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 12:34:25.710 00:00:10.360 TCP 23.104.0.1:35836 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:35:08.927 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:51158 10 6452 1 2025-09-10 12:35:26.109 00:00:10.330 TCP 23.104.0.1:53266 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:36:06.215 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 12:36:06.411 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 12:36:09.128 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32956 10 6452 1 2025-09-10 12:32:26.355 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 12:36:26.475 00:00:10.366 TCP 23.104.0.1:50954 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:37:09.340 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58278 10 6452 1 2025-09-10 12:37:26.877 00:00:10.380 TCP 23.104.0.1:38216 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:38:09.563 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43208 10 6452 1 2025-09-10 12:38:27.300 00:00:10.321 TCP 23.104.0.1:52180 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:39:09.737 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36232 10 6452 1 2025-09-10 12:39:27.664 00:00:10.334 TCP 23.104.0.1:60318 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:40:09.952 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:52536 12 6556 1 2025-09-10 12:36:26.360 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 12:40:28.054 00:00:10.369 TCP 23.104.0.1:48398 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:41:06.462 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 12:41:06.279 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 12:41:10.191 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55724 10 6452 1 2025-09-10 12:41:28.461 00:00:10.376 TCP 23.104.0.1:47810 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:42:10.404 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58654 10 6452 1 2025-09-10 12:38:26.358 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 12:42:28.879 00:00:10.365 TCP 23.104.0.1:36244 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:43:10.616 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:40140 10 6452 1 2025-09-10 12:43:29.281 00:00:10.321 TCP 23.104.0.1:42722 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:44:10.784 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60678 10 6452 1 2025-09-10 12:44:29.642 00:00:10.366 TCP 23.104.0.1:46264 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:45:10.955 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50690 10 6452 1 2025-09-10 12:45:30.058 00:00:10.365 TCP 23.104.0.1:38908 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:46:06.296 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 12:46:06.552 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 12:46:11.137 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37560 10 6452 1 2025-09-10 12:42:26.363 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 12:46:30.461 00:00:10.368 TCP 23.104.0.1:33832 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:47:11.313 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34108 10 6452 1 2025-09-10 12:47:30.867 00:00:10.371 TCP 23.104.0.1:49322 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:48:11.533 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33518 10 6452 1 2025-09-10 12:44:26.359 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 12:48:31.277 00:00:10.757 TCP 23.104.0.1:45956 -> 1.101.0.1:3000 15 1926 1 2025-09-10 12:49:11.747 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:33644 12 10365 1 2025-09-10 12:49:32.100 00:00:10.369 TCP 23.104.0.1:48878 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:50:11.953 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36110 12 6556 1 2025-09-10 12:50:32.504 00:00:10.366 TCP 23.104.0.1:41452 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:51:06.772 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 12:51:06.696 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 12:51:12.189 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:50108 10 6452 1 2025-09-10 12:51:32.911 00:00:10.366 TCP 23.104.0.1:51178 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:52:12.358 00:00:10.797 TCP 1.101.0.1:3000 -> 22.102.0.1:34466 10 6452 1 2025-09-10 12:48:26.362 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 12:52:33.314 00:00:10.363 TCP 23.104.0.1:49542 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:53:13.203 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-09-10 12:53:33.715 00:00:10.378 TCP 23.104.0.1:45738 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:54:13.416 00:00:11.230 TCP 1.101.0.1:3000 -> 22.102.0.1:59546 10 6452 1 2025-09-10 12:50:26.363 00:05:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 12:54:34.132 00:00:10.325 TCP 23.104.0.1:59078 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:55:14.689 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-09-10 12:55:34.493 00:00:10.432 TCP 23.104.0.1:55184 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:56:06.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 12:56:06.822 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 12:56:14.909 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-09-10 12:56:34.965 00:00:10.366 TCP 23.104.0.1:38538 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:57:15.131 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36860 10 6452 1 2025-09-10 12:57:35.368 00:00:10.322 TCP 23.104.0.1:58628 -> 1.101.0.1:3000 11 1507 1 2025-09-10 12:58:15.350 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50196 10 6452 1 2025-09-10 12:54:26.366 00:05:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 12:58:35.728 00:00:10.372 TCP 23.104.0.1:43726 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507220, total packets: 1588, avg bps: 1073, avg pps: 0, avg bpp: 319 Time window: 2025-09-10 11:56:26 - 2025-09-10 12:59:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0008s Wall: 0.0018s flows/second: 88837.1 Runtime: 0.0019s