Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 06:59:16.803 00:00:10.844 TCP 1.101.0.1:3000 -> 22.102.0.1:48508 10 6452 1 2025-09-11 06:59:27.681 00:00:10.329 TCP 23.104.0.1:40314 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:00:17.688 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56120 10 6452 1 2025-09-11 06:56:26.694 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 07:00:28.047 00:00:10.360 TCP 23.104.0.1:50512 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:01:28.616 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 07:01:28.479 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 07:01:17.901 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33616 10 6452 1 2025-09-11 07:01:28.448 00:00:10.360 TCP 23.104.0.1:43076 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:02:18.114 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57148 10 6452 1 2025-09-11 07:02:28.843 00:00:10.352 TCP 23.104.0.1:35100 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:03:18.291 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:58384 10 6452 1 2025-09-11 07:03:29.238 00:00:10.365 TCP 23.104.0.1:45676 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:00:26.694 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 07:04:18.496 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42914 10 6452 1 2025-09-11 07:04:29.643 00:00:10.367 TCP 23.104.0.1:41350 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:05:18.708 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53612 10 6452 1 2025-09-11 07:05:30.057 00:00:10.369 TCP 23.104.0.1:55258 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:06:28.283 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 07:06:18.918 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49266 10 6452 1 2025-09-11 07:06:28.585 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 07:02:26.692 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 07:06:30.460 00:00:10.320 TCP 23.104.0.1:60710 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:07:19.123 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34802 10 6452 1 2025-09-11 07:07:30.821 00:00:10.325 TCP 23.104.0.1:58274 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:08:19.338 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45648 10 6452 1 2025-09-11 07:08:31.182 00:00:10.325 TCP 23.104.0.1:34526 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:09:19.546 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59694 10 6452 1 2025-09-11 07:09:31.548 00:00:10.362 TCP 23.104.0.1:39226 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:10:19.777 00:00:10.590 TCP 1.101.0.1:3000 -> 22.102.0.1:33038 10 6452 1 2025-09-11 07:06:26.694 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 07:10:31.951 00:00:10.368 TCP 23.104.0.1:37634 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:11:28.862 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 07:11:20.404 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:37112 10 6452 1 2025-09-11 07:11:28.733 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 07:11:32.355 00:00:10.362 TCP 23.104.0.1:41032 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:12:20.590 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41234 10 6452 1 2025-09-11 07:08:26.691 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 07:12:32.753 00:00:10.387 TCP 23.104.0.1:54838 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:13:20.837 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:50410 12 10365 1 2025-09-11 07:13:33.183 00:00:10.438 TCP 23.104.0.1:37120 -> 1.101.0.1:3000 15 1926 1 2025-09-11 07:14:21.094 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51352 10 6452 1 2025-09-11 07:14:33.665 00:00:10.368 TCP 23.104.0.1:40522 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:15:21.312 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52034 10 6452 1 2025-09-11 07:15:34.099 00:00:12.666 TCP 23.104.0.1:41620 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:16:28.845 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 07:16:28.838 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 07:12:26.695 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 07:16:21.526 00:00:10.837 TCP 1.101.0.1:3000 -> 22.102.0.1:40760 10 6452 1 2025-09-11 07:16:36.823 00:00:14.476 TCP 23.104.0.1:49412 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:17:22.394 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45150 10 6452 1 2025-09-11 07:17:41.347 00:00:10.360 TCP 23.104.0.1:38058 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:14:26.693 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 07:18:22.608 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-09-11 07:18:41.747 00:00:10.366 TCP 23.104.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:19:22.827 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57570 10 6452 1 2025-09-11 07:19:42.151 00:00:10.360 TCP 23.104.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:20:23.064 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48160 10 6452 1 2025-09-11 07:20:42.554 00:00:10.541 TCP 23.104.0.1:33276 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:21:28.727 00:00:00.011 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 07:21:28.522 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 07:21:23.276 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48242 10 6452 1 2025-09-11 07:21:43.134 00:00:10.361 TCP 23.104.0.1:60490 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:18:26.699 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 07:22:23.517 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34368 10 6452 1 2025-09-11 07:22:43.536 00:00:10.327 TCP 23.104.0.1:35924 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:23:23.734 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:40380 10 6452 1 2025-09-11 07:23:43.901 00:00:11.037 TCP 23.104.0.1:52748 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:20:26.697 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 07:24:23.976 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46726 10 6452 1 2025-09-11 07:24:44.976 00:00:10.372 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:25:24.217 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:50466 10 6452 1 2025-09-11 07:25:45.388 00:00:10.324 TCP 23.104.0.1:59886 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:26:29.363 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 07:26:29.243 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 07:26:24.409 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40054 10 6452 1 2025-09-11 07:26:45.757 00:00:10.802 TCP 23.104.0.1:60172 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:27:24.635 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40932 10 6452 1 2025-09-11 07:27:46.601 00:00:10.366 TCP 23.104.0.1:34958 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:24:26.704 00:05:00.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 07:28:24.850 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:34360 10 6452 1 2025-09-11 07:28:47.009 00:00:10.323 TCP 23.104.0.1:59262 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:29:25.095 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42450 10 6452 1 2025-09-11 07:29:47.371 00:00:10.375 TCP 23.104.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:26:26.705 00:05:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 07:30:25.309 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55928 10 6452 1 2025-09-11 07:30:47.785 00:00:10.365 TCP 23.104.0.1:51546 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:31:28.989 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 07:31:29.154 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 07:31:25.528 00:00:10.664 TCP 1.101.0.1:3000 -> 22.102.0.1:51394 10 6452 1 2025-09-11 07:31:48.190 00:00:10.369 TCP 23.104.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:32:26.229 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37286 10 6452 1 2025-09-11 07:32:48.599 00:00:10.369 TCP 23.104.0.1:37174 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:33:26.453 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57156 10 6452 1 2025-09-11 07:33:49.009 00:00:10.363 TCP 23.104.0.1:37462 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:30:26.707 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 07:34:26.673 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:56084 10 6452 1 2025-09-11 07:34:49.409 00:00:10.368 TCP 23.104.0.1:34390 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:35:26.905 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43692 10 6452 1 2025-09-11 07:35:49.816 00:00:10.372 TCP 23.104.0.1:41896 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:36:29.286 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 07:36:29.305 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 07:32:26.708 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 07:36:27.119 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40760 10 6452 1 2025-09-11 07:36:50.228 00:00:10.364 TCP 23.104.0.1:58614 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:37:27.362 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56472 10 6452 1 2025-09-11 07:37:50.631 00:00:10.367 TCP 23.104.0.1:57252 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:38:27.581 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35784 10 6452 1 2025-09-11 07:38:51.048 00:00:10.360 TCP 23.104.0.1:51420 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:39:27.796 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45824 10 6452 1 2025-09-11 07:39:51.443 00:00:10.365 TCP 23.104.0.1:43068 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:36:26.710 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 07:40:28.024 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40734 10 6452 1 2025-09-11 07:40:51.844 00:00:10.385 TCP 23.104.0.1:47132 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:41:29.245 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 07:41:29.348 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 07:41:28.248 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58592 10 6452 1 2025-09-11 07:41:52.269 00:00:10.325 TCP 23.104.0.1:45928 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:38:26.708 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 07:42:28.463 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40876 10 6452 1 2025-09-11 07:42:52.633 00:00:10.322 TCP 23.104.0.1:52526 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:43:28.675 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54134 10 6452 1 2025-09-11 07:43:52.993 00:00:10.326 TCP 23.104.0.1:60288 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:44:28.891 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44958 10 6452 1 2025-09-11 07:44:53.358 00:00:10.366 TCP 23.104.0.1:39878 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:45:29.111 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52178 10 6452 1 2025-09-11 07:45:53.763 00:00:10.328 TCP 23.104.0.1:48332 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:46:29.316 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 07:42:26.711 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 07:46:29.527 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 07:46:29.324 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42910 10 6452 1 2025-09-11 07:46:54.128 00:00:10.331 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:47:29.532 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54844 10 6452 1 2025-09-11 07:47:54.505 00:00:10.368 TCP 23.104.0.1:54714 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:44:26.709 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 07:48:29.751 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43986 10 6452 1 2025-09-11 07:48:54.911 00:00:10.324 TCP 23.104.0.1:54350 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:49:29.959 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56210 12 6556 1 2025-09-11 07:49:55.279 00:00:10.366 TCP 23.104.0.1:51018 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:50:30.207 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49332 10 6452 1 2025-09-11 07:50:55.683 00:00:10.366 TCP 23.104.0.1:41732 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:51:29.401 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 07:51:29.626 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 07:51:30.416 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56392 10 6452 1 2025-09-11 07:51:56.099 00:00:10.364 TCP 23.104.0.1:37156 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:48:26.712 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 07:52:30.588 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33988 10 6452 1 2025-09-11 07:52:56.505 00:00:10.366 TCP 23.104.0.1:32854 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:53:30.824 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35908 10 6452 1 2025-09-11 07:53:56.913 00:00:10.361 TCP 23.104.0.1:59948 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:50:26.710 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 07:54:31.002 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43788 10 6452 1 2025-09-11 07:54:57.312 00:00:10.365 TCP 23.104.0.1:46640 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:55:31.184 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33488 10 6452 1 2025-09-11 07:55:57.714 00:00:10.381 TCP 23.104.0.1:49258 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:56:29.617 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 07:56:29.689 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 07:56:31.403 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48738 10 6452 1 2025-09-11 07:56:58.139 00:00:10.374 TCP 23.104.0.1:46318 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:57:31.585 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 10 6452 1 2025-09-11 07:57:58.552 00:00:10.361 TCP 23.104.0.1:39532 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:54:26.716 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 07:58:31.798 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46064 10 6452 1 Summary: total flows: 163, total bytes: 501277, total packets: 1569, avg bps: 1060, avg pps: 0, avg bpp: 319 Time window: 2025-09-11 06:56:26 - 2025-09-11 07:59:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0000s Wall: 0.0014s flows/second: 116191.6 Runtime: 0.0014s